I just want to note, that I don't want to take credit for comming up with the process, everything was laid out for me, I just applied it to the 700p and it worked flawlessly.

First you will need to build a cable for the Treo that has the USB to Serial converter.

(Credit goes to Shadowmite) Directions for building the cable could be found here --> [Only Registered Users Can See Links]

(Credit Mines) The next step involves quite a few of the step as explained here --> [Only Registered Users Can See Links]

From the above link, you will need Steps 1, 3, and 4

The next step was laid out perfectly by amoamare, here --> [Only Registered Users Can See Links]

Now again, because I didn't come up with ANY of the process myself, I don't know if the people being credited are the originators of the methods. I'm pretty sure they are, but I could be wrong. The process works %100. I currently have a Verizon Treo 700p working on US Cellular. Take it easy, and again, let's thank the people above for their hard work.

UPDATE!!!

The method I posted above only works on SOME radio versions. I never mentioned that mine is a Verizon 700p, nor did I note the radio version. Now the screen is cracked and it's of no use...

the following method was brought to you by Kocoman (one of the very few people that is still hacking and sharing information and not charging for it...yet) and it was written up by kshah. Thanks guys.


Post #66 ([Only Registered Users Can See Links])

It work like ppc6700. 100% tested.

I was beginning to think people thought I was lying.

does it work on treo 650 ?
the other way of change esn is upgrade you treo650 with CDMAFirmwareUpdaterApp_Device.prc , but it's too hard for us

Does anyone else who have a 700p have success with this?

Work 100% in sprint treo 700p.

does it work on treo 650 ?
the other way of change esn is upgrade you treo650 with CDMAFirmwareUpdaterApp_Device.prc , but it's too hard for us

Not work in a 650. treo 650 is so hard, as far i know isn´t posible change esn on treo 650 yet.

thanks it was really usefull I managed to change almost everything from my phone (Treo 700wx).

esn is ok ,but now it has not service ,then I put prl ,but nothing ,
any body help me ,my treo now is searching service all time

I did change my ESN ，but it doesn‘t work （make phone call）
may be my 700p nvm was destroyed
anybody can provide CDMA+NV+Backup.pdb （verizion700p ）
many thanks

If you're not getting service, it's not the NVM....you didn't put the ESN in correctly or the checksum. follow the directions closely. I did the same with my ppc6700 at the time.

I have send u a message ,thx

FOR THOSE THAT HAVE PROBLEMS WITH TREO 700 ESN LOOK AT THIS
LETS SAY THAT YOUR ESN IS 65AF45D0 AND YOUR CHECKSUME IS 05483948

YOU HAVE TO PUT YOUR ESN LIKE THIS WITH WINXEX OR OTHER HEX EDITOR

D045AF65 NEXT THE CHECKSUME 48394805

AND FOR THOSE THAT CANT DO IT SEND ME YOUR ESN.SYS FILE WITH ESN AND CHECK ---- AND ILL DO IT FOR U OK

has anyone on Sprint been able to edit the esn and still get EVDO? i remeber trying to get evdo on the 6700 after the esn was changed was a pain :-/

Can anyone make a cable for me and sell it?
I just don't have to time to mess with this kind of stuff!

cloned 700wx to my M1... text/voice/1x data all work perfect.

anyone have a trick to getting sprint evdo to work on cloned phones? the only thing i've found successful so far is taking certain nvm files from a working evdo phone and copying them to the clone of the same model.

anyone know how to get evdo without needing those files?

autoprime:

Its been posted how and works ive tested it here in utah plenty of times
You need to copy The AKEY, ESN, and SPC and the phone that you clone must be EVDO capable
both phones must be EVDO capable

Amoamera,
I heard that the SPC has to match inorder to use the web on sprint, so you are saying that is true? It is strange because I never did that and it worked for me.

Forgot to ask...Can anyone please sell me one of those cables?

Amoamera,
I heard that the SPC has to match inorder to use the web on sprint, so you are saying that is true? It is strange because I never did that and it worked for me.

did u have evdo working as well.. or just 1x?

no haven't tested that.

i am trying to change the esn and i keep getting this error and the esn does not change. does any one know what the problem could be.


An error occured white trying to set the creation date of file 'nvm/$SYS.ESN'. The file was copied successfully, however the creation date may not be accurate.

Error Code (104) : file open

im trying this on a Srint treo 700p , i am 100% certain that i have the right esn combination.

There some one sells this cable on ebay.
search for treo 700 unlock.

it worked on a 650 treo for me.

i am trying to change the esn and i keep getting this error and the esn does not change. does any one know what the problem could be.


An error occured white trying to set the creation date of file 'nvm/$SYS.ESN'. The file was copied successfully, however the creation date may not be accurate.

Error Code (104) : file open

im trying this on a Srint treo 700p , i am 100% certain that i have the right esn combination.
__________________

anyone have solution for treo 650 yet?
please post

anyone have solution for treo 650 yet?
please post

this IS the solution :p

For treo 600 and 650

Download QPST 2.8

Start the program and click on Start Clients and then Software Download

Go to backup and do a backup of your treo to Desktop. If you don't know the SPC of your phone use BitPim to load the file system and look in NV/NV_002 File. Is the 6 digit number. If you have Verizon is 000000 if is Altell is 000000 only sprint and bell lock there phones (idiots).

Ok after you did a Backup use HEXVI32 ([Only Registered Users Can See Links])
and open the file you just created. Now search with search utility of xvi32 for your esn backwords. if esn is 123456 search for 653412. Now change it. You will fiend it 2 times. Save the file.
Now open qpst and do a restore to the phone. Restart the pone and there you go. Good luck.

When trying to put into Diag mode on Treo 700wx I get the error message :"could not open DBG". Any thoughts?

tried both CDMAFirmwareUpaterApp_Devive.prc and QPST method on my treo 650. not working

Koco...i don't get what the problem is that you're having, ##3424#, #*#3424#, ##3424 Send (green button)....NONE of those will work to put the phone in passthrough?

I'm sorry to all those who have asked questions and I haven't answered. I could tell you that this also works on a 700w/wx...

For treo 600 and 650

Download QPST 2.8

Start the program and click on Start Clients and then Software Download

Go to backup and do a backup of your treo to Desktop. If you don't know the SPC of your phone use BitPim to load the file system and look in NV/NV_002 File. Is the 6 digit number. If you have Verizon is 000000 if is Altell is 000000 only sprint and bell lock there phones (idiots).

Ok after you did a Backup use HEXVI32 ([Only Registered Users Can See Links])
and open the file you just created. Now search with search utility of xvi32 for your esn backwords. if esn is 123456 search for 653412. Now change it. You will fiend it 2 times. Save the file.
Now open qpst and do a restore to the phone. Restart the pone and there you go. Good luck.
does no one have QPST 2.8

For treo 600 and 650

Download QPST 2.8

Start the program and click on Start Clients and then Software Download

Go to backup and do a backup of your treo to Desktop. If you don't know the SPC of your phone use BitPim to load the file system and look in NV/NV_002 File. Is the 6 digit number. If you have Verizon is 000000 if is Altell is 000000 only sprint and bell lock there phones (idiots).

Ok after you did a Backup use HEXVI32 ([Only Registered Users Can See Links])
and open the file you just created. Now search with search utility of xvi32 for your esn backwords. if esn is 123456 search for 653412. Now change it. You will fiend it 2 times. Save the file.
Now open qpst and do a restore to the phone. Restart the pone and there you go. Good luck.

i tried that. nothing happens. its still the same esn. dont i need to change the checksum somewhere else too?

To get MSL without cable, just use the CDMAUpdater from Sprint 700p, then do the same "Backup NV"....

i can get msl via bitpim, everytime i restore back up using qpst it goes through with it but doesnt work. i can back up nv using cdmaupdater?

So...to do this on the 700wx u still need to make the same data cable? And then follow the normal instructions right??

Does this 700p ESN solution works with the Treo 600? Thanks

Does this 700p ESN solution works with the Treo 600? Thanks

i want too know too?

Doesn't work on the 650, so I doubt it will work on the 600...

I just want to note, that I don't want to take credit for comming up with the process, everything was laid out for me, I just applied it to the 700p and it worked flawlessly.

First you will need to build a cable for the Treo that has the USB to Serial converter.

(Credit goes to Shadowmite) Directions for building the cable could be found here --> [Only Registered Users Can See Links]

(Credit Mines) The next step involves quite a few of the step as explained here --> [Only Registered Users Can See Links]

From the above link, you will need Steps 1, 3, and 4

The next step was laid out perfectly by amoamare, here --> [Only Registered Users Can See Links]

Now again, because I didn't come up with ANY of the process myself, I don't know if the people being credited are the originators of the methods. I'm pretty sure they are, but I could be wrong. The process works %100. I currently have a Verizon Treo 700p working on US Cellular. Take it easy, and again, let's thank the people above for their hard work.

First known Treo 700p ESN repair....YEAH!


Shadowmite's site seems down... but the question is will a serial hotsync cable work?

To change the ESN without using bitpim/QPST/CRC changing etc, just backup your nv back up, then search your ESN hex (4 char) in REVERSE order ie: if your ESN HEX is "A0B1C2D3", then search for "D3C2B1A0", it should be around the 0000EFXX area.
KEEP BACKUPS OF CDMA NV DATA.pdb!!!. you also will need to update your PRL again.

IMPORTANT: Then you have to erase the NV NVRAM.
Install the Treo 650 bootloader drivers,
##UPST to boot into the color screen (remove the sd card first)
plug in hotsync cable
download mtty 1.42, and open the usb port.
then type "cdmar bl usb"
then type "nverase"
after done take out battery to reset phone.
then restore your "Repaired ESN" with the cdmaupdater...
then reload prl with *2280x

YOU MUST do the NVERASE or else your new ESN will not be written. The cdmaupdater checks first if the NV is all FF, (due to the nverase), if not it will not write the new ESN.

Please excuse the newbie question, but how do you back up the CDMA NV DATA.pdb? What program do you use and where would you find this program?

I have tried the Treo650 rom tool, it lets me back up the ram and rom but not the nvram... :(

I just want to note, that I don't want to take credit for comming up with the process, everything was laid out for me, I just applied it to the 700p and it worked flawlessly.

First you will need to build a cable for the Treo that has the USB to Serial converter.

(Credit goes to Shadowmite) Directions for building the cable could be found here --> [Only Registered Users Can See Links]

(Credit Mines) The next step involves quite a few of the step as explained here --> [Only Registered Users Can See Links]

From the above link, you will need Steps 1, 3, and 4

The next step was laid out perfectly by amoamare, here --> [Only Registered Users Can See Links]

Now again, because I didn't come up with ANY of the process myself, I don't know if the people being credited are the originators of the methods. I'm pretty sure they are, but I could be wrong. The process works %100. I currently have a Verizon Treo 700p working on US Cellular. Take it easy, and again, let's thank the people above for their hard work.

First known Treo 700p ESN repair....YEAH!


Does this method also applies to Treo 650.

Regards.
Jockey............!

...................

Doesn't work on the 650, so I doubt it will work on the 600...

I have treo 650 esn solution but its untested :S

post this solution bro........

sorry solution isnt free.
Phone has to have a partial flash in order to repair esn.

I need to know the solution for a Treo 600. I'm trying to use it for MetroPCS. Anyone got any ideas?

Maybe post any information about the process,, anything

sorry solution isnt free.
Phone has to have a partial flash in order to repair esn.

Isn't free? So i have to pay you?

Ok I need to rant:

I'm sorry but if there is anything I hate more it's people who "say" they know a solution but won't admit it to the community. Unless you have a guide posted your information is as useless as you are. Stop wasting space and getting peoples hopes up.

Alright I'm done.

You can rant all you want the fact still the same, life isnt free you dont get everything handed to you. I as well as the 1,000 of other people have contributed more then there share of information on this board and others.

We share information all the time, but not all the information is free.
these users such as CDMA_FLASH and others * sorry dont have you all on my head* Make great software and to have a user like me crack there software and release it on the internet for everyone to benifite from it and not give back isnt right. They spent there time and money to make a solution and deserve something back.

Im done ranting now.

You can rant all you want the fact still the same, life isnt free you dont get everything handed to you. I as well as the 1,000 of other people have contributed more then there share of information on this board and others.

We share information all the time, but not all the information is free.
these users such as CDMA_FLASH and others * sorry dont have you all on my head* Make great software and to have a user like me crack there software and release it on the internet for everyone to benifite from it and not give back isnt right. They spent there time and money to make a solution and deserve something back.

Im done ranting now.

Ahh I under stand it now. So why don't you provide a link or pm me where I can purchase this information?

Ahh I under stand it now. So why don't you provide a link or pm me where I can purchase this information?



im interesting too amoamare pls pm or link

To change the ESN without using bitpim/QPST/CRC changing etc, just backup your nv back up, then search your ESN hex (4 char) in REVERSE order ie: if your ESN HEX is "A0B1C2D3", then search for "D3C2B1A0", it should be around the 0000EFXX area.
KEEP BACKUPS OF CDMA NV DATA.pdb!!!. you also will need to update your PRL again.

IMPORTANT: Then you have to erase the NV NVRAM.
Install the Treo 650 bootloader drivers,
##UPST to boot into the color screen (remove the sd card first)
plug in hotsync cable
download mtty 1.42, and open the usb port.
then type "cdmar bl usb"
then type "nverase"
after done take out battery to reset phone.
then restore your "Repaired ESN" with the cdmaupdater...
then reload prl with *2280x

YOU MUST do the NVERASE or else your new ESN will not be written. The cdmaupdater checks first if the NV is all FF, (due to the nverase), if not it will not write the new ESN.

Thanks for solution,
For thoes who are looking for boot loader drivers, are here

[Only Registered Users Can See Links]

Now one question:

How to take back up of NV DATA? Which is software?

kshah, can you rewrite my esn change howto when you have free time and post it here too. my english is confusing. thanks

Thanks to Kocoman, I was sucessful in ESN repair of 700P. It also supports SMS, Net connection by #777. Not WAP. Will post his solution in detail by tomorrow.

Thanks to Kocoman, I was sucessful in ESN repair of 700P. It also supports SMS, Net connection by #777. Not WAP. Will post his solution in detail by tomorrow.

How to make treo to run on other network by ESN repair
Perquisites:

1. Treo 700P handset
2. USB data cable
3. MTTY 1.42
4. Treo 650 boot loader driver
5. SD / MMC card. Do not use Mini / Micro SD with adaptor as mentioned on palm site. I dont know. I used MMC card.
6. Resco explorer to copy files from ROM to SD card.
7. CDMA updater program files

Attached RAR file contains:

1. Drivers
2. MTTY 1.42
3. Resco explorer
4. CDMA updater (Attached for sprint, I tested same file from verizon on my sprint phone and it works so this file must work on verizon too.)

How to do it:

1. Insert you SD card in to treo, treo will automatically create file system. Where you will see following folder tree Palm -> Launcher, all .prc files or programmes are to be copied in launcher folder. Alternatively you can hotsync these two file to your device too. If you choose hot syncing, remember to uninstall hotsync and reboot your computer, else your phone may not be detected

2. Copy CDMA updater .prc program file and *_en*.oprc language files to launcher folder of memory card.

3. Launch CDMAFirmwareUpdater.prc after a while, white screen, it will lauch, press butten similar to right click, it is bottom right button, next to ALT key, select debug, select Backup NV option, unselect all other options. and run UPDATE now.

4. After some time it will say that backup sucessful etc.

5. Launch Resco explorer, go to Drive Named RAM0 and find CDMA NV BACKUP.PDB, copy it to SD card.

6. Download file to your computer.

Here is next step to write ESN to back up file and its very important.

1. Open file with any hex editor, in my phone back up I found important data at following address:

SPC: If you want your phone to programmed by *228, then this is important code: 0000F770
MSL, this code is used to access phone nam programming: 0000F670
ESN: Esn found 3 locations, I dont know why, but when I made mistake on one location, phone kept on rebooting when I entered ##MSL# code. SO I changed ESN at all locations. ESN is in reverse

1: 0000CF00
2. 0000CFA0
3. 0000EA40

Copy modified file to Memory card.

Once you update all this, means you have prepared necessary stuff to repair SN on handset.

Then

1. Install bootloader driver.

2. Connect your handset to PC with USB cable. Press button on hotsync cable for a while, Once you get message that palm hot sync detected, dial ##UPST# and phone will be in boot loader mode.

3. Your computer will detect USBSYNC hardware.

4. Launch MTTY 1.42, select USB port and start.

5. Once connected type

cdmar bl usb

It will answer:
+CDMARouterCommnad...CDMA Mode = bl, PC Port = usb, CDMA Uart Speed = 115200

Type: nverase
Answer: Identify INTEL Combo Flash !



Identify INTEL Combo Flash !

********************************



Erase NV Item Data Done!

CDMA DBG>

Now done, Reboot phone, by disconnecting and removing battery.

Once phone is rebooted:

Insert memory card.
Launch Resco explorer
Copy back file from memory card to RAM0, when asked, overwrite existing file.
Lauch CDMA updater, and select debug, uncheck all option except restore NV.
Check and verify MSL by dialing ##MSLCODE# and ESN in phone -> option -> phone info.

Once NV back up is restored, you are done, you have NEW SN, SPC and MSL on handset. you can dial *228 to activate or PRL update as supported by your operator.

If you have MIN available with you then:

dial ##MSL# and edit Mobile number to your MIN and MSID to your MIN.

dial ##data# and select advance

Options Required:

1. Vocoder EVRC=1 (Most digital network support EVRC)
2. Home NID: Your operators NID code
Home NID: Your operators SID code
MCC: Your contry code
MNC: Your mobile network code


Special thanks to Kocoman for being very helpful in teaching me this and guiding me. This guide is posted with his permission.

If you have access to serial cable, just check what is slot cycle.

AT$QCSLOT may be slot cycle.

I just want to note, that I don't want to take credit for comming up with the process, everything was laid out for me, I just applied it to the 700p and it worked flawlessly.

First you will need to build a cable for the Treo that has the USB to Serial converter.

(Credit goes to Shadowmite) Directions for building the cable could be found here --> [Only Registered Users Can See Links]

(Credit Mines) The next step involves quite a few of the step as explained here --> [Only Registered Users Can See Links]

From the above link, you will need Steps 1, 3, and 4

The next step was laid out perfectly by amoamare, here --> [Only Registered Users Can See Links]

Now again, because I didn't come up with ANY of the process myself, I don't know if the people being credited are the originators of the methods. I'm pretty sure they are, but I could be wrong. The process works %100. I currently have a Verizon Treo 700p working on US Cellular. Take it easy, and again, let's thank the people above for their hard work.

First known Treo 700p ESN repair....YEAH!

Ravenii I am curious who shared the solution with you. It is good it is out there now of course.

How to make treo to run on other network by ESN repair
Perquisites:

1. Treo 700P handset
2. USB data cable
3. MTTY 1.42
4. Treo 650 boot loader driver
5. SD / MMC card. Do not use Mini / Micro SD with adaptor as mentioned on palm site. I dont know. I used MMC card.
6. Resco explorer to copy files from ROM to SD card.
7. CDMA updater program files

Attached RAR file contains:

1. Drivers
2. MTTY 1.42
3. Resco explorer
4. CDMA updater (Attached for sprint, I tested same file from verizon on my sprint phone and it works so this file must work on verizon too.)

How to do it:

1. Insert you SD card in to treo, treo will automatically create file system. Where you will see following folder tree Palm -> Launcher, all .prc files or programmes are to be copied in launcher folder. Alternatively you can hotsync these two file to your device too. If you choose hot syncing, remember to uninstall hotsync and reboot your computer, else your phone may not be detected

2. Copy CDMA updater .prc program file and *_en*.oprc language files to launcher folder of memory card.

3. Launch CDMAFirmwareUpdater.prc after a while, white screen, it will lauch, press butten similar to right click, it is bottom right button, next to ALT key, select debug, select Backup NV option, unselect all other options. and run UPDATE now.

4. After some time it will say that backup sucessful etc.

5. Launch Resco explorer, go to Drive Named RAM0 and find CDMA NV BACKUP.PDB, copy it to SD card.

6. Download file to your computer.

Here is next step to write ESN to back up file and its very important.

1. Open file with any hex editor, in my phone back up I found important data at following address:

SPC: If you want your phone to programmed by *228, then this is important code: 0000F770
MSL, this code is used to access phone nam programming: 0000F670
ESN: Esn found 3 locations, I dont know why, but when I made mistake on one location, phone kept on rebooting when I entered ##MSL# code. SO I changed ESN at all locations. ESN is in reverse

1: 0000CF00
2. 0000CFA0
3. 0000EA40

Copy modified file to Memory card.

Once you update all this, means you have prepared necessary stuff to repair SN on handset.

Then

1. Install bootloader driver.

2. Connect your handset to PC with USB cable. Press button on hotsync cable for a while, Once you get message that palm hot sync detected, dial ##UPST# and phone will be in boot loader mode.

3. Your computer will detect USBSYNC hardware.

4. Launch MTTY 1.42, select USB port and start.

5. Once connected type

cdmar bl usb

It will answer:
+CDMARouterCommnad...CDMA Mode = bl, PC Port = usb, CDMA Uart Speed = 115200

Type: nverase
Answer: Identify INTEL Combo Flash !



Identify INTEL Combo Flash !

********************************



Erase NV Item Data Done!

CDMA DBG>

Now done, Reboot phone, by disconnecting and removing battery.

Once phone is rebooted:

Insert memory card.
Launch Resco explorer
Copy back file from memory card to RAM0, when asked, overwrite existing file.
Lauch CDMA updater, and select debug, uncheck all option except restore NV.
Check and verify MSL by dialing ##MSLCODE# and ESN in phone -> option -> phone info.

Once NV back up is restored, you are done, you have NEW SN, SPC and MSL on handset. you can dial *228 to activate or PRL update as supported by your operator.

If you have MIN available with you then:

dial ##MSL# and edit Mobile number to your MIN and MSID to your MIN.

dial ##data# and select advance

Options Required:

1. Vocoder EVRC=1 (Most digital network support EVRC)
2. Home NID: Your operators NID code
Home NID: Your operators SID code
MCC: Your contry code
MNC: Your mobile network code


Special thanks to Kocoman for being very helpful in teaching me this and guiding me. This guide is posted with his permission.

I copied the all Necessary .prc Files to memnory card Laucher Folder and insert it into device and when i try to launch the CdmaFirmwareUpdater.prc i am getting a message Please wait and screen returning back to where it was.I think i am making a real big mistake but at the same time lot of confused.Please Help Mr Shah.

Regards,
Mobile_Jockey..

Use Mcfile/filez to copy all of the cdmaupdater*.* into the Palm RAM. don't run it from card


Will u please upload the Mcfile/filez here.i dont have .

Regards,

There is resco explorer attached in attachment. you can use that too instead of Mcfile/FILEZ

There is resco explorer attached in attachment. you can use that too instead of Mcfile/FILEZ

When i copied the CDMAFirmwareUpdater.prc and CDMAFirmwareUpdater_enUS.oprc to RAM,and lauching fro there on giving me error " The Application cannot be launched because it is missing localization information."

Please help me out of this Trouble.
Please guide me step by step ...

Your help would be appreciate...

Warm Regards,
Mobile...

I think rename the *.oprc to *.prc
or *.bprc to *.prc..

same for *.?pdb into *.pdb

Its the first time you touched Palm OS I assume.
Next problem you will have is why the file is "CDMA+NV+BACKUP.pdb" and when it copies out becomes "CDMA NV BACKUP.pdb"
Thats the way Palm works..

I am able to Trace the ESN in CDMA NV BACKUP.PDB, but at different Adderess (i.e 0000E620 ) But really confused i didnt find the esn as Kocoman mentioned and also want to know where to get the spc or where to place the spc.I have palm Treo of Verizon Carrier.Masters Guide me.

Wbr,
Mobile_Jockey...!

It's hard to believe that there is no way to write your own prl from the sd card. The updaters have no trouble programming prls. If only I knew how to edit the info in the pdb files and overwrite my prl. I've been working on a treo 650 for over a week now, and can't stand the thought of having to build/buy a cable. :mad:

Uh... Thanks.

Anybody got a cable for sale? :eek:

lol

You're trying to tie me up for another week huh?

Thanks again. It looks like there are a few programs I'll have to find before I even begin to try any of this.

You are the man Kocoman!!! :D

I finally got this thing up! I was trying to get a verizon 650 onto cricket's network. I can't tell you how it felt to here their music. After I read you're post a little closer, I realized that I had downloaded all the programs you were describing already. I think I went and got xvi32 instead of the hex edit that I had. That was the only hang-up I had in the process. When I was pasting from the clipboard into the updater hex, it kept changing the positions. I finally gave up, and ff'd the whole block, pasted over it, and filled in 00's over the rest of the ff's. I was desperate, and figured I give that a shot.

I'm really tempted to upload the modified updater on here to help out other guys that were in my position. (What do you think?)

As far as the other reply you gave me about the usb cable... From everything I had read, that would never work because of the pin-out mainly. I was running shadowmite's rom tool but unless I could get a rom with the cricket prl from someone else, I didn't see much point. The mitty program seemed like it was going somwhere, but I was a little nervous there.

I didn't want to post before I felt I had read/tried everthing I could. I really want to thank you again. You are the man!

It is possible to upgrade firm ware of only radio. I did as under:

1. Took CDMAfirmwareupdater.bprc from verizon update.
2. Renamed it to *.prc
3. Patched for my operators PRL and copied it to device by hotsync with language file.
4. Run firmware updater, select debug, uncheck all except "UPDATE FIRMWARE" it will update firmware only.

It was 187 now it is 188

Kocoman, I read flashing with PALM firm ware other than original provider but I am not able to understand how to do it? can you please guide me.

I am yet to rewrite patching PRL guide, which I will do soon.

Posting two CDMA firmware updater with international PRL of RELIANCE INDIA

Verizon phone version is 188
Sprint version is 187

You might be right Kocoman about many Cricket users here. I think if it's not against the rules or anything, I'll try and post the modified updater I made. It has to be worth-while for any one trying to get a cricket prl onto a treo 650 like I was trying to do. It should be able to be used on any brand cdma, because all I did to get the prl on mine, was to unselect everthing but write prl. I had some success doing that on my phone with a sprint updater. For some reason, I thought cricket shared the same network. If I ran the whole thing (wrong version), the phone kept resetting.
My next task with this phone is getting the internet through the carrier.

About PRL I have another idea, how about blanking out PRL is firmware updater and having PRL loaded in defaultprl.pdb?

Here is screen shot of AAA PW for nokia 6155 on reliance India network.

Nokia uses qnc, LG and other handsets do not uses qnc for connection. There are passwords in LG too. Samsung I am not aware about.

Giving this another shot. I just wrote a complete How I Did It on here then hit the backspace button or something and lost the whole F***ing thing. I'm not going to write it over. I just hope the files upload now!
Plain and simple these are both the same file, only zip, and rar.
Other people give the instructions about getting the update files from palm's website and onto your sd card. (Briefly said; after running installer, and before hotsync direction/pull files from treo 650 updater in palm or user selected then install folder). This is for a cdma 650 treo only. It will let you install the 1039 cricket prl to your phone. And I believe it will work with any carrier updater (not sure) I was working with verizon.
Get updater files installed onto your sd card and then put this file into the launcher folder on the sd card (overwrite if asked). Put the card into the treo and select cdma updater. You probably can just update like normal, But I didn't do the whole update. Instead I used the right top soft key to bring up menus, and selected debug. Then I unchecked everything except write prl. Now I did the update. That was it! *228, and I was on Cricket. I don't think all the other steps of moving the files to your sd card are necessary. You most likely can just get the file I uploaded to your launcher folder (like hotsync) and go from there. Just remember not to hit the update button in the middle before you right click for the debug oprtions!!!!. This is a VZ updater I used, and you would have to re-update your phone for the carrier you're branded with I guess if you screw it up.

I wrote the whole process out for dummies like me, but had to start over.
Good luck!

P.S.
I'm a complete novice at this stuff. Any questions might be better directed to Kocoman or kshah. I can't thank them enough!!!
By the way if you do get onto Cricket... Here's a nice link ([Only Registered Users Can See Links]) for you.
If I was good at this stuff. I'd alter the updater I'm posting with other prls.

Giving this another shot. I just wrote a complete How I Did It on here then hit the backspace button or something and lost the whole F***ing thing. I'm not going to write it over. I just hope the files upload now!
Plain and simple these are both the same file, only zip, and rar.
Other people give the instructions about getting the update files from palm's website and onto your sd card. (Briefly said; after running installer, and before hotsync direction/pull files from treo 650 updater in palm or user selected then install folder). This is for a cdma 650 treo only. It will let you install the 1039 cricket prl to your phone. And I believe it will work with any carrier updater (not sure) I was working with verizon.
Get updater files installed onto your sd card and then put this file into the launcher folder on the sd card (overwrite if asked). Put the card into the treo and select cdma updater. You probably can just update like normal, But I didn't do the whole update. Instead I used the right top soft key to bring up menus, and selected debug. Then I unchecked everything except write prl. Now I did the update. That was it! *228, and I was on Cricket. I don't think all the other steps of moving the files to your sd card are necessary. You most likely can just get the file I uploaded to your launcher folder (like hotsync) and go from there. Just remember not to hit the update button in the middle before you right click for the debug oprtions!!!!. This is a VZ updater I used, and you would have to re-update your phone for the carrier you're branded with I guess if you screw it up.

I wrote the whole process out for dummies like me, but had to start over.
Good luck!

P.S.
I'm a complete novice at this stuff. Any questions might be better directed to Kocoman or kshah. I can't thank them enough!!!
By the way if you do get onto Cricket... Here's a nice link ([Only Registered Users Can See Links]) for you.
If I was good at this stuff. I'd alter the updater I'm posting with other prls.

i got the prl updated so that when i dial *228 it goes to cricket programming menu....but it cannot program....why...do i need to edit anything else???

I replied to pm.

I'm a complete novice at this stuff. Any questions might be better directed to Kocoman or kshah. I can't thank them enough!!!
By the way if you do get onto Cricket... Here's a nice link ([Only Registered Users Can See Links]) for you.
If I was good at this stuff. I'd alter the updater I'm posting with other prls.


I've got a copy of the new cricket evdo prl (only works on evdo phones, and only in the 4 test markets)

I dont have time to tackle the project of making the updater with it, but if anyone wants to try, PM me and i'll get you the evdo prl

Not work in a 650. treo 650 is so hard, as far i know isn´t posible change esn on treo 650 yet.

the programming of the treo verizon 650

I've got a copy of the new cricket evdo prl (only works on evdo phones, and only in the 4 test markets)

I dont have time to tackle the project of making the updater with it, but if anyone wants to try, PM me and i'll get you the evdo prl

the EVDO prl for cricket is poted on hofo and it is also market specific...cricket is actually in the process of updating all markets to EVDO...i just hope houston comes soon...

is any body knows if tro 600 esn changer will work with 650 or 700?

Treo 650 / 700 esn changing method will not work for Treo 600, Treo 600 ESN change isnt free

Here a one looks like esn changer for treo 600, If possible any body try see if it works with 650:D

Here a one looks like esn changer for treo 600, If possible any body try see if it works with 650:D

you can just solution the esn on 650 via the cable method in this thread...hmmm- is that what you are asking for...also- you can use cdma fw updater to create an nvm backup, edit the backup, and then restore it...

hope this helps...

Thanks, I know how to chage esn the hard way: rewrite $sys.esn
May-be some one has free solution to rewrite $sys.esn file in phone directly, it will work with many phones:D

i haven't tried esn change but i did just "erase" command and not nverase...no cdmar...hmmm- would this maybe work...not sure if it erases nvm or if it just erases like a hard reset? if i still had a 650 i'd try it...

No it doesn't work. the 650 bootloader does not have the "cdmar" function to erase the NV... (taken from someone else who tested my method)

Yes it does, I just changed the ESN on my Treo 650.

What you have to do is wipe the NVM using the "cdmar bl" command. I was tryping in cdmar bl usb and it would tell me "Usage USB router". Once you type in "cdmar bl" you can the subsequently wipe the NVM by typing in nverase.

Follow the rest of the guide by rewriting the NV backup using the CDMA Update Program.

can some one share "cdma update" program?
Thanks.

do you need the one for palm or wm???
pm me.

Yes it does, I just changed the ESN on my Treo 650.

What you have to do is wipe the NVM using the "cdmar bl" command. I was tryping in cdmar bl usb and it would tell me "Usage USB router". Once you type in "cdmar bl" you can the subsequently wipe the NVM by typing in nverase.

Follow the rest of the guide by rewriting the NV backup using the CDMA Update Program.

Just confirming frenchies's post. It does work on the 650 that way.
I've lost my internet and have done everything but stomp on this thing to get it back. I thought I had changed something in the nv files that caused it, but according to my service (Cricket), they're having an outage. I hope they're right, because I don't know what else to do now!

Just confirming frenchies's post. It does work on the 650 that way.
I've lost my internet and have done everything but stomp on this thing to get it back. I thought I had changed something in the nv files that caused it, but according to my service (Cricket), they're having an outage. I hope they're right, because I don't know what else to do now!

To get it back you will need to do two things:

Go to the phone application and type in "#*#pri#" or ## whatever works for you and reset the PRI back to the factor default.

When that's done go to the "Network" settings and click new. Make sure for the connection field it says "High Speed Wireless". I don't know what the user name and password setup is on Cricket so good luck getting it :-)

Once done with that go to "Details" and uncheck "Mobile IP". Go to advanced and check IP Address Automatic and Query DNS.

This worked with me and Verizon so it may work with you!

Good luck!

serial cable or shadowmite's PL2303 cable both work on 650...you can detect with any program via these two cables...the futuredial cable is now scarce and cost is $30 from their site(i've used #19 and #32)...there is a kyocera programming cable that works as well...verified by TechGuy40 over at hofo...the cable is:

txdta10146

i have found this cable for about $15 and the chip is built into the usb plug so no ugly box in the middle...

hope you guys enjoy

Frenchie, I tried those things. I've completely reset my phone. I reset with 786 and used mtty to nverase as well as load back up my saved rom and use the palm update. The only thing I haven't tried is flashing to an older version and back up again which randomwit suggested, or hooking it up to a 220v cable. :eek:
I've been seeing posts that are showing up with the same thing now, so it might be on the carriers end after all. The funny thing is that I have an LG on the same account that has no trouble browsing.
Kokoman I sent a reply to your reply. Thanks.
And randomwit... I need that cable back! Just kidding. :D

you could also try flashing another carrier's rom and the back...i think you might have to do this from bootloader, but i'm not sure...

someone please confirm if this is an option

Koco, I think you mentioned that software before. I couldn't find it here, or through google for that matter. I even checked the torrents. Are you sure you're spelling that right. I searched cowdy and cowdypst.

Google Search ([Only Registered Users Can See Links])

Direct Link ([Only Registered Users Can See Links])

Thanks! I'm checking it out now. Could not find that.

I'm an idiot. I was searching for cowdy. Koco you bastard! :D

Randomwit.. the shadowmite/futuredial cable can be subustitute with and T5 sync cable. (it has all the pins), but you need to open it up and solder some things. then test it out with booting into ##UPST and see if there is any bootloader output. the pl2303 you can get from any nokia cable that has the 'thing' in the middle, then cut the end out and solder into T5 sync cable. in hong kong those cost like $20hkd..

Stnar.. try CowdyPST for treo 650, its in this forum. it was intended for cricket I think, if it doesn't detect cricket (how??) then it won't run I think, but an ollydbg patch would fix that.. you can edit some WAP/MMS settings there. its sort of like the NV Edit for LG EnV phones.


I glance at the email, but I will reply your email later.

yes i have built the cable and mastered the 650 and most treos...i really want to master the centro but i don't have one to play with...i guess that's enough off topic stuff for me...

hey kocoman- thanks for the help...hit me up in that centro thread ;)

yes i have built the cable and mastered the 650 and most treos...i really want to master the centro but i don't have one to play with...i guess that's enough off topic stuff for me...

hey kocoman- thanks for the help...hit me up in that centro thread ;)

I got Centro.
But I coundn't access file system.
How can I access to file system of Centro.
Thanks.

One more question;
What does it mean sms_0000, sms_0001, sms_0002, sms_0003 files?

if you look in the centro thread you can see that we don't have that info yet...try using shadowmite's "prolific" cable and doing ##UPST or ##DIAG...i tried ## diag and couldn't get it to read...i had like 10 min to mess with a centro so i didn't get much done...i just need one here at the house for a couple days...

I got Centro.
But I coundn't access file system.
How can I access to file system of Centro.
Thanks.

One more question;
What does it mean sms_0000, sms_0001, sms_0002, sms_0003 files?

if you want to send yours out, i'll flash it for free...i may take me a week to figure it out but you only pay for shipping.

Giving this another shot. I just wrote a complete How I Did It on here then hit the backspace button or something and lost the whole F***ing thing. I'm not going to write it over. I just hope the files upload now!
Plain and simple these are both the same file, only zip, and rar.
Other people give the instructions about getting the update files from palm's website and onto your sd card. (Briefly said; after running installer, and before hotsync direction/pull files from treo 650 updater in palm or user selected then install folder). This is for a cdma 650 treo only. It will let you install the 1039 cricket prl to your phone. And I believe it will work with any carrier updater (not sure) I was working with verizon.
Get updater files installed onto your sd card and then put this file into the launcher folder on the sd card (overwrite if asked). Put the card into the treo and select cdma updater. You probably can just update like normal, But I didn't do the whole update. Instead I used the right top soft key to bring up menus, and selected debug. Then I unchecked everything except write prl. Now I did the update. That was it! *228, and I was on Cricket. I don't think all the other steps of moving the files to your sd card are necessary. You most likely can just get the file I uploaded to your launcher folder (like hotsync) and go from there. Just remember not to hit the update button in the middle before you right click for the debug oprtions!!!!. This is a VZ updater I used, and you would have to re-update your phone for the carrier you're branded with I guess if you screw it up.

I wrote the whole process out for dummies like me, but had to start over.
Good luck!

P.S.
I'm a complete novice at this stuff. Any questions might be better directed to Kocoman or kshah. I can't thank them enough!!!
By the way if you do get onto Cricket... Here's a nice link ([Only Registered Users Can See Links]) for you.
If I was good at this stuff. I'd alter the updater I'm posting with other prls.


Does someone have this same thing for a treo 700p?....if so plz post it.

Thanks

Someone said it worked for them on a 700. It might have been a verizon phone, I don't know. That's what the file is written for. Could give it a shot...

i believe the 650 and 700p firmware updater is the same but that would be a question for kocoman as he knows much more about the treo than i do...

kocoman-

i have a 700p that is in that endless reboot loop at the "Access Powered" screen...i have tried the soft- warm- hard- and zero out resets but nothing has worked.
the only reset that i can perform is a hard reset but after i confirm "erase all data?" it just back to the loop...
holding the up button on directional pad and resetting does not work...

you have suggestion???

or just throw it away?

the fix at treocentral will not work with this device...

not sure what happened...it belongs to someone else...i will ask if i can send it out...if yes, then i'll send it to you.

also- i posted in centro thread...i will be having a centro for a couple days so i can try to flash...i would like to dump the rom for you but i need to know how to do this...i will send you whatever i can from the centro so you can start working with it...

I have a 700w on the Sprint network. All I want to do is use this phone on the US Cellular network. Ive been reading, and reading but most of this stuff feels like Im reading Chinese lol. I understand that I have to change my PRL data, etc. but I dont know if I have to buy another data cable and even when I do buy it, which program to download.

Most of the stuff on here pertains to the 650 and 700p but does the same apply to the 700w model? Please break it down to me a little. Thanks in advance :-)

There is a thread on "another" forum about 700w/700wx change ESN. Since I don't have any 700w/700wx to work with I can't help with the PRL. But the NV data location seems different for 700w/700wx, because after flashing I get QUALCOMM as "internal" banner.. anyway will post more details about this someday.

Also if someone has a Tungsten W, can they do a ##DIAG?


Thanks, can you PM a link to the forum. I'll be patient till I find more info on this topic.

Updated first post.

Where? there are no other good forums for this kind of stuff.

@kocoman your signature was advertising and that isn't allowed.

Asking for DONATION of BROKEN Palms for RESEARCH is not allowed...

You could do that but if you want people to send you emails, please add the address to your profile; you are a valuable member of this forum but we have to keep things under control

Creator of Treo 700p CDMA ESN&PRL repair without Bitpim/QPST/checksums. (Tested on 650/755p successfully by others), Rewritten by Kshah

Looking for bricked/stuck in bootloader Treo CDMA 700p/700w/700wx/755p/Centro for research, to create solutions for ie: using WM6 on 700p or vice versa, un/debricking.

(650&680 is similar and is not useful in the flash research, 750/500 are GSM, research for possible repair via stuck/brick only)

email is in the profile (no PM pls, want to keep PM under control)

hey buddy- i went to your profile and your email is disabled...please fix.

i need help with a sprint 755...i have set up network connection via all three methods for manual programming and still get an error:
"Error: Please check your username and password and try again. Your mobile srvice provider may not support dial-up connections."
i had this same problem with my alltel 650 for the high speed wireless connection, but i could still connect via virtual modem method...everthing was fixed after i installed the 650 update, but there is no update for the 755...

if there is any way i could email you the nvm file and you could take a look...i have done the pdpset 1 sommand and set up the network connection but i think the sprint stuff is getting in the way somehow...

maybe i could just flash the alltel rom or something and see if it will program for cricket...i have never flashed a rom on a treo though so i'd need a little help in that department.

~thnx~


Creator of Treo 700p CDMA ESN&PRL repair without Bitpim/QPST/checksums. (Tested on 650/755p successfully by others), Rewritten by Kshah

Looking for bricked/stuck in bootloader Treo CDMA 700p/700w/700wx/755p/Centro for research, to create solutions for ie: using WM6 on 700p or vice versa, un/debricking.

(650&680 is similar and is not useful in the flash research, 750/500 are GSM, research for possible repair via stuck/brick only)

email is in the profile (no PM pls, want to keep PM under control)

I fixed it, try it again..

I just bought a 755p which I tried my method on and it worked fine...how do I find out what you need Koco?

I just bought a 755p which I tried my method on and it worked fine...how do I find out what you need Koco?

what method did you use to get wap on the 755?...did you set it up with cricket??

thnx

randomwit,

755p has always been the same as 700p, as far as the method goes...

I should note though that I we (customer&I) had to call cricket tech support and request that they refresh their account in order to get wap working. The sympton was invalid username/password. The diagnosis was made after I switched the phone to my account, and after a *228, it immediately connected to the internet using (myphone#)@mycricket.com as the username, cricket as the password.

I think we had to actually call back and ask them to do it again, although the first call went a little "iffy", if you know what I mean. Now I know if I really think this is the problem, to stay on the line with them after they refresh the account, until it works, avoiding the callback if they have to do it again. Usually though it works the first time, assuming that is the problem.

This works MANY if not MOST CDMA devices. I have used this meathod on several CDMA phones. It will NOT work on ANY motorola.

randomwit,

755p has always been the same as 700p, as far as the method goes...

I should note though that I we (customer&I) had to call cricket tech support and request that they refresh their account in order to get wap working. The sympton was invalid username/password. The diagnosis was made after I switched the phone to my account, and after a *228, it immediately connected to the internet using (myphone#)@mycricket.com as the username, cricket as the password.

I think we had to actually call back and ask them to do it again, although the first call went a little "iffy", if you know what I mean. Now I know if I really think this is the problem, to stay on the line with them after they refresh the account, until it works, avoiding the callback if they have to do it again. Usually though it works the first time, assuming that is the problem.

i will def try that...i have been hex editing the nvm but i still have the originals...thnx beezle

As per other message at shadowmite

prominator/Kshah can you help him if you have time. I am having some family issues that I don't have free time anymore to help. sorry, thank you guys

I can only help with the initial ESN/PRL changing part. (when I have time to reply the emails) Other parts I can't help because I don't live in the USA and also I have not received any palms for research. So there was no more new development.

cannot seem to get this program to work. program stops responding about 10 sec after entering in any command. any ideas?

cannot seem to get this program to work. program stops responding about 10 sec after entering in any command. any ideas?

Can you post a screenshot
do you get a prompt?

I have usb programming cables for all treo models 650 thru 755...look here in post #6:
[Only Registered Users Can See Links]

no prompts, just sits there whenever i type anything and then when i click, i get the program not responding in the title bar. it even does it if i just hit the enter button. i have tried diff usb ports and i'm pretty sure usb drivers are up to date. i'm sure it's something with my system (p4 3GHz, 1 GB ram, WinXP Pro sp2) but what I have no idea, because when i put the palm in bootloader mode and connect it, i have to unplug it and plug it back in before the program will launch. if i don't i get the windows has encountered an error and cannot continue. i have not had any problems with any of the other steps, just this program. i've got a sprint 650 with a bad esn that is currently running a verizon rom and this is the last step in my expirament. just can't get that nverase so i can update the sn! i will try to get some screenshots later, including the launch error when i figure out what i did with my sync cable when i moved my pc. this is mainly just for fun cause my main phone is a 700p on a sprint employee addon plan.

randomwit: i may check your cables out soon! thanks.

I also have this same problem with a guy that works at a cell phone repair shop. but he did not email me back about the progress.

Anyone done thier 700wx using the nv backup and restore method? I used cdmafirmwareupdater to make a back up, but can not find where it put the back up file. I installed resco file explorer 2007 and it does not give me an option to view contents of ram0. did a file search for backup.pdb and .pdb but found nothing.

Any help would be appreciated. Thanks,

-CC

Try Audiovox 6700 way. It may work. Palm method will not work for sure.

Do the futuredial calbes; #22 nokia and #42 kyocera work? Do both these cables need the connectors switched out ? Any of thier cables work as is, besides soldering the wires in the right order?

Thanks,

-CC

P.S. do the future dial "snap" software cables work or are they missing the required chip?

don't think the snap ones work...you need to see if it has a box in the moddle and that it is futuredial...the only ones that give any trouble out of those is one of the sanyo model ones...it has an extra wire on the usb side of the chip that you have to cut...other than that, i have used many many many futuredial cables to build programming cables...

hope this helps.


Do the futuredial calbes; #22 nokia and #42 kyocera work? Do both these cables need the connectors switched out ? Any of thier cables work as is, besides soldering the wires in the right order?

Thanks,

-CC

P.S. do the future dial "snap" software cables work or are they missing the required chip?

One is manufactured by Susteen the other 2 are by Futuredial (#22 & #42) that are for use with Futuredial's SnapSync, etc software..

-CC

Anyone have a complete Verizon nvbackup.dat they would care to share, please PM me.

Thanks,

-CC

P.S. do all the nvbackup.dat end up with different carrier's info? I wanted to eliminate the sprint stuff on my phone, but it seems that even a ROWES carrier spanish firmware treo 700wx has sprint/iota info in it as well as it's own..

Anyone have a complete Verizon nvbackup.dat they would care to share, please PM me.

Thanks,

-CC

P.S. do all the nvbackup.dat end up with different carrier's info? I wanted to eliminate the sprint stuff on my phone, but it seems that even a ROWES carrier spanish firmware treo 700wx has sprint/iota info in it as well as it's own..

Language is on the ROM, not NV
On the NV is LED settings, ie: blinks when online
There may be another EFS partition not backed up by CDMAUpdater (as said by Techguy40/Alias2). but I have not explored it fully. will post some info someday if I get my HDD files fixed.
IOTA/MIP/DMU/EV/AN/AAA sutff I am not sure still. still trying to crack open the novatel's IOTA stuff under Bell Mobility with (see the data card thread if interested)

How change esn of the Treo 700WX? I try metod of the treo 700p. but no install .prc.

How change esn of the Treo 700WX? I try metod of the treo 700p. but no install .prc.

Why is the board so slow today..

anyway its the same thing, just use techguy40's files at howardforums

press left softkey to bring up the hidden menu..
backup nv
its in c:\ (in WM device)
nverase
then change esn
copy back to c:\
then restore nv
(it will take longer before the progress move so be patient)

You can the put this software here?

Just a quick note...

Open qpst, ##3424# (on most palms), and THEN connect the cable to the phone.

or u can try with this combination

DM Mode : [#][#][3][2][2][4] [send]
DM Mode : [#] [#][3][2][2][4] [send]
DM Mode : [#] [#][3][4][2][4] [send]
DM Mode : [#][#][3][4][2][4] [send]

CDMA firmware updater with TATA India PRL

what about 755P??

Work 100% in sprint treo 700p.

Where can I download Future Dial USB2Serial Driver??? Link is not working!
Please!!!!


I just want to note, that I don't want to take credit for comming up with the process, everything was laid out for me, I just applied it to the 700p and it worked flawlessly.

First you will need to build a cable for the Treo that has the USB to Serial converter.

(Credit goes to Shadowmite) Directions for building the cable could be found here --> [Only Registered Users Can See Links]

(Credit Mines) The next step involves quite a few of the step as explained here --> [Only Registered Users Can See Links]

From the above link, you will need Steps 1, 3, and 4

The next step was laid out perfectly by amoamare, here --> [Only Registered Users Can See Links]

Now again, because I didn't come up with ANY of the process myself, I don't know if the people being credited are the originators of the methods. I'm pretty sure they are, but I could be wrong. The process works %100. I currently have a Verizon Treo 700p working on US Cellular. Take it easy, and again, let's thank the people above for their hard work.

UPDATE!!!

The method I posted above only works on SOME radio versions. I never mentioned that mine is a Verizon 700p, nor did I note the radio version. Now the screen is cracked and it's of no use...

the following method was brought to you by Kocoman (one of the very few people that is still hacking and sharing information and not charging for it...yet) and it was written up by kshah. Thanks guys.


Post #66 ([Only Registered Users Can See Links])

I see that this is esn repair solution, but I'm wondering if the same steps could be applied for this.

I have a 700p on nTelos network. Wondering if I used the cdma updater to back up all plus nvm on it. I'd like to have another 700p for my second line. Basicaly I want to take a verizon phone and put it on nTelos network. So, I'm figuring i could back up the rom on my 700p and apply it to the Verizon phone and have same settings, nvm, etc?

My onlly question would be if it backs it up would it change the esn to that of the original phone? Anyone know enough bout this to kind of lead me in the right direction? Maybe even walk me through it?

It will not change ESN. Also I think if ESN do not match it will not rewrite NV back up.

So, if if the nvbackup won't write, then am I stuck without the nvm? I'm assuming that nvbackup contains he nvm like prl, sms, etc. I'm used to the motorolas so I'm kind of theorizing.

Is this way possible without cable, or should I buckle down and start getting a cable.


appreciate the help.

It seems you have not mentioned your problem properly, Pl elaborate, I am sure people here will help.

Ok. I'll try to elaborate.

Have these phones.

Treo 700p nTelos Network

Treo 700p Verizon Network

Want to change the Verizon one over to nTelos as well.

Tried cdma updater to backup then restore on Verizon, but it didn't work.

I guess what I'm looking for is there solution without making serial cable.

Ok. I'll try to elaborate.

Have these phones.

Treo 700p nTelos Network

Treo 700p Verizon Network

Want to change the Verizon one over to nTelos as well.

Tried cdma updater to backup then restore on Verizon, but it didn't work.

I guess what I'm looking for is there solution without making serial cable.

You don't need serial cable to change esn, prl etc, thats what this thread is for. people used to need shadowmite's serial cable/futuredial cable to do the same thing.

Ok. I'll try to elaborate.

Have these phones.

Treo 700p nTelos Network

Treo 700p Verizon Network

Want to change the Verizon one over to nTelos as well.

Tried cdma updater to backup then restore on Verizon, but it didn't work.

I guess what I'm looking for is there solution without making serial cable.

You do not need cable as Kocoman said. you have to do following:

Assuming that you want to transfer settings from verizon phone to nTlos.

1. Take back up of verizon phone.
2. Edit ESN, SPC of verizon back up and change it to NTELOS phone ESN and SPC (SPC is to be changed So that your phone can be programmed over that air and ESN is not same it will not restore NV)
3. Copy Verizon NV back up in Ntelos phone and restore NV. Now your verizon data is on Ntelos phone.

When I'm using the treo updater, I get the updater to come up. I select debug, but there is no selection process to get only nvm...doing something wrong?

here are screen shots.
it should be like this.

Not getting that second screen that's odd. I installed both files that I downloaded.

try original updater or do hardreset of phone and then try.

I have a Treo 700w and I would like to use with Metro PCS. I already use the solution to replace ESN and it´s ok. But How to replace the PRL file that´s original from Verizon.

Thanks in advance. BR,

fm_rocha

I have a Treo 700w and I would like to use with Metro PCS. I already use the solution to replace ESN and it´s ok. But How to replace the PRL file that´s original from Verizon.

Thanks in advance. BR,

fm_rocha

use QPST to load prl file

Hi,

I tryed using QXDM,QPST,Cait, Bitpim but I just have USB cabble and I didn´t figured out a way to recognize the handset by those programs ( I used ##3424# to put in Diag Mode ). Do u know how to do it by USB connection...

Thanks in advance. BR,

Fm_rocha

USB wont work. Only serial will work.

i have a 755p treo for sprint that i purchased from someone on craigslist the esn ended up being bad is there a way i can change the esn.

I'm not finding the ESN in the nvram backup pdb on a Verizon 700p. I backed up the file, copied it with Filez once and copied it with the explorer app in the zip, didn't make a difference. The pdb is only 74kb or so, I tried searching for the ESN in Dec and in Hex, both backwards and forwards.

Basically I just want to get this Verizon 700p on Cricket with the ESN of an older 650 that is currently on Cricket (to replace the 650). Someone posted the CDMA updater with the Cricket PRL, haven't tried that yet, but I assume changing the PRL is all that is needed to get it to swap networks? I don't have a data cable, was hoping to get the 700p on Cricket in the next few days and wanted to avoid ordering a cable.

Guess I didn't notice that the CDMAUpdater with the Cricket PRL was for a 650 only. Is there a way to get the CDMAUpdater for the 700p embedded with a Cricket PRL?

Yes it is possible to load your custom prl with cdmaupdater, please see some of the threads by ksash. as to how to do it, I have not write it up yet, but it involves finding the 'existing' prl, and overwriting it with your own, then padding the end with 00's.

(your prl must be smaller than the one in the cdmaupdater, otherwise you need prc2db program (I forgot the name now)

As to what units can change ESN

700p, 755p, 700w, 700wx

I'm attaching a copy of CDMAUpdater.prc that I patched with the Cricket 1040 PRL (and a second with 1050 for EVDO). Never done it before, but just found a copy of the sprint20227 prl that was included in the other copy of the CDMAUpdater and overwrote it. I put the PRL on a 700p I had and it seemed to jump onto the cricket network, but I haven't cloned the ESN yet to really test it.

I'm attaching a copy of CDMAUpdater.prc that I patched with the Cricket 1040 PRL (and a second with 1050 for EVDO). Never done it before, but just found a copy of the sprint20227 prl that was included in the other copy of the CDMAUpdater and overwrote it. I put the PRL on a 700p I had and it seemed to jump onto the cricket network, but I haven't cloned the ESN yet to really test it.


Do you have the sprint file , please share

BR

I got the Sprint PRL from [Only Registered Users Can See Links]

I also wasn't able to find the ESN in the CDMAnvrambackup.pdb file, only found it in the pdb once and at a different location than mentioned in the writeups, replacing that occurrence didn't do the trick. So I couldn't do the cable-less ESN repair/clone, just called cricket to have them change the ESN for my account. I'm guessing the Verizon 700p is doing something different in regards to the ESN on nvram or it has changed since the original writeup perhaps. Also couldn't get data access on EVDO, works fine on 1x though (prl 1040). If anyone has any clues to that I'd appreciate it, but I'll do some more searching later (been combing through so many posts in the past few days...).

Do you have the sprint file , please share

BR



I have sprint treo 650 , so i make a mistake on my request , what i need if you have it, its the CDMAfirmwareUpdater.prc for it (4 sprint treo 650)

BR
TIA

I have sprint treo 650 , so i make a mistake on my request , what i need if you have it, its the CDMAfirmwareUpdater.prc for it (4 sprint treo 650)

BR
TIA

[Only Registered Users Can See Links]

Is it possible to edit esn on a 755p Sprint yet?

Any help would be appreciated

Calling Kokoman, centro update is released. Please find out way to change ESN of centro. Right now I am trying to debrick one centro. Then will post NV back up and if you guide me, what ever you say.

Is it possible to edit esn on a 755p Sprint yet?

Any help would be appreciated



700P and 755p has same procedure

Calling Kokoman, centro update is released. Please find out way to change ESN of centro. Right now I am trying to debrick one centro. Then will post NV back up and if you guide me, what ever you say.

yes esn solution for centro would be greatly appreciated

here are screen shots.
it should be like this.

Dear KShah,
I am in India and trying to get my newly bought Treo 700P to work on RIM. I bought the phone in US.

I read your earlier posting and for the first step copied both the CDMA updater files in Pam >> Launcher directory

After this i inserted the card in the phone and tried to run CDMA Updater. It said "Please wait" and after a while came back to the same screen. The screens you pasted in your post did not show up. I did a hard reset also and tried again but the same result. I tried the RIL specific updaters that you have posted, but they also gave the same result.

Can you help?

Provided below are the details that I see on my phone
Phone Number: 0000002119
Data Username: 0000002119
ESN: *********(actually gives an ESN)
Software: -/32/142-
CC-Cap:CES-CE1-003
Carrier DB: 261
MSID: 0000002119

...
After this i inserted the card in the phone and tried to run CDMA Updater. It said "Please wait" and after a while came back to the same screen.

I carefully read some of the earlier posts and tried the following:
1. Renamed *_en*.oprc to *.prc file
2. copied both the cdmaupdater*.* files into the Palm RAM and ran the cdmaupdater from there. (used Resco explorer for this)

The above gave me the blank screen and debug menu was available there.

So the first hurdle is crossed. I have saved the CMA NV backup file on my computer. Am now trying to figure out how to search for the ESN.

Calling Kokoman, centro update is released. Please find out way to change ESN of centro. Right now I am trying to debrick one centro. Then will post NV back up and if you guide me, what ever you say.

If someone can send me a 800w or a Centro within Canada, I can take a look

I am trying this on one of the treo 755p but for some reason it cannot find the complete esn on the hex file. I am tryng to look for it but are not able to can i give someone my NV Backup so u can change the esn for me ill just do the update.

is there a way to change Treo 600 PRL and ESN without serial cable just like 650 and it's sucessors?
I only have USB cable...

same thing im trying to do, I just need to change the prl though. all i know is that you somehow patch cdmaupdater with the new prl and restore it using it.

Its already been written before and also understood and done by ksash

load up prc edit, look at the PRL section, notice the first few bytes of the PRL, then search for that in winhex, then overwrite that when your prl

can you re explain that, i dont understand.

..........

Its already been written before and also understood and done by ksash ...

nevermind i got it, thank you!!

For those search :o challenged, namely me. Can you post a link to that explanation? Much appreciated!!!! Obviously I'm speaking of the cdma updater and the ability to patch your carriers prl into it.

once you change the hex esn will the normal 11 digit esn change? because thats what metropcs is asking for..

once you change the hex esn will the normal 11 digit esn change? because thats what metropcs is asking for..

Yes, its just converted on the fly, but the most important is the hex esn, that is the 'seed'

Hello Koco. I don't know if you remember me, I haven't been on here in a while. But the forum is bugging me to post something so I am.
Sorry for being off topic.

Hi, really need some help here with a bricked Treo 650. Since there was no Nverase function in MTTY, unknowingly, I ran a "flashtest" comand on MTTY and after that the Treo 650 has gone dead - no lights, no boothing no charging even with a charger. Appears I have flashed the ROM totally. Is there a way to revive the Treo? Will really appreciate your help. I have a nvbackup and a CDMA backup.pdb on my hard disk.

Thanks

Need urgent help to unbrick Treo 650 please.

Thanks in advance

I tried and I had no luck.. I have a Sprint Treo 700p, I have the serial cable I used on a 700w and a 700wx as well, but the 700p will not read it. I did the ##3424# and it gave me the dialog it was in diag mode but QPST won't find it. Any ideas? Is there another way of doing this?

Hi,
You need a Serial cable (NOT Hot Sync cable) which is different. PM me with the exact details, maybe my months of research could be of help to you.

Thanks

I tried and I had no luck.. I have a Sprint Treo 700p, I have the serial cable I used on a 700w and a 700wx as well, but the 700p will not read it. I did the ##3424# and it gave me the dialog it was in diag mode but QPST won't find it. Any ideas? Is there another way of doing this?

700p does passthrough mode not diag.

first check the pins on the bottom of hte treo...i have had dirty pins cause connection failure...

next check for a port conflict...if you have another treo around, see if it will connect...if you don't have one or the other treo won't connect, then disable anything in device manager that uses the same port (if anything) and then reset your computer with the connected and the treo connected to the cable and in diag passthrough mode...

if that fails, there could be so many other things wrong...you may have a bad pin or something...

700p does passthrough mode not diag.

first check the pins on the bottom of hte treo...i have had dirty pins cause connection failure...

next check for a port conflict...if you have another treo around, see if it will connect...if you don't have one or the other treo won't connect, then disable anything in device manager that uses the same port (if anything) and then reset your computer with the connected and the treo connected to the cable and in diag passthrough mode...

if that fails, there could be so many other things wrong...you may have a bad pin or something...

I use mtty (in serial mode), via the "cdmar bl serial" to test my cables. Also Telus disables the diag port, so you need to replace its NV with another carrier. I have not find which 'byte' enables it yet. but I got the layout of the NV file posted as an excel file here in the forum somewhere.

That 600 ESN does not work, it's just CDMA Universal, it says it changed it, but it reads the original ESN back, no change.

I copied the all Necessary .prc Files to memnory card Laucher Folder and insert it into device and when i try to launch the CdmaFirmwareUpdater.prc i am getting a message Please wait and screen returning back to where it was.I think i am making a real big mistake but at the same time lot of confused.Please Help Mr Shah.

Regards,
Mobile_Jockey..
i am facing the same problem how did you solve it

That 600 ESN does not work, it's just CDMA Universal, it says it changed it, but it reads the original ESN back, no change.

Treo 600 needs ESN PATCH and then Flashed. you can not modify esn like others.
I have the patch somewhere i will upload it later if i get time.

anyone have a link to a serial cable... (already made) im horrible at soddering.. even at spelling it.. lol .. would just prefer to purchase it.

anyone have a link to a serial cable... (already made) im horrible at soddering.. even at spelling it.. lol .. would just prefer to purchase it.

i have usb to serial cable for the treo 650, 700p, 700w/wx, 680, 750, 755

pm me for details...

Hi, really need some help here with a bricked Treo 650. Since there was no Nverase function in MTTY, unknowingly, I ran a "flashtest" comand on MTTY and after that the Treo 650 has gone dead - no lights, no boothing no charging even with a charger. Appears I have flashed the ROM totally. Is there a way to revive the Treo? Will really appreciate your help. I have a nvbackup and a CDMA backup.pdb on my hard disk.

Thanks

The EXACT reason why I personally don't like any other method of hacking the Treo. Yes, it's "easier" to do it with USB, but then you have the extremely high risk of doing exactly as quoted, and you're sol.

I look at it like this, if you can't solder 3 damn wires, and figure out how to get it done that way...you shouldn't be trying any of this.

though you cannot do the nv erase command on the 650, there is a command that works...it is postedhere in this thread i believe...

also- you can buy a cable from me if you can't build one...save you the super easy task of soldering those 3 wires...lol

I am working on my tre 650 trying to repair, I have done my 755p with cable method flawlessly. I tried using the same method on my 650 but when i get to the QPST method i get an error stating something about illegal operation. Can anyone tell me what am i doing wrong...tried doing the NV backup but my phone automatically restarts every time i try to run the CDMAupdater...

your error with qpst usually means that the files you are trying to access are locked...try to access them with bitpim...

if that fails, then try using cdma workshop.

your error with qpst usually means that the files you are trying to access are locked...try to access them with bitpim...

if that fails, then try using cdma workshop.

I can access the files without a problem, i managed to replace the hex with the checksum, the problem is when i try to write the edited ESN file It gives me the error. Bitpim will notmet me write anything. Tried using the latest CDMA Workshop 3.3 and still had the same problem, any suggestions to unlock it.

so I totally lost my CDMA NV DATA.pdb.....:eek:
any way to get like a generic backup of NV items so my treo will start...
I know....n00b ass error.

I have tried every hex editor built and cannot find the ESN # in the
CDMA NV Backup.pdb file, can some one tell me... am I wrong... the ESN is supposed to be there?? or is another number that I have to look for??
I have look backwards, foward, h...l... all the lattitudes... I even made a game w the Hex editor :D:D:p:p... someone give me light lol :rolleyes:

so I totally lost my CDMA NV DATA.pdb.....:eek:
any way to get like a generic backup of NV items so my treo will start...
I know....n00b ass error.

use one from another device of the same model number

this is interchangable

if you have run nverase command with mtty, then you will need to change the esn in the backup, or your esn will be switched to esn from the backup of the other device

I have tried every hex editor built and cannot find the ESN # in the
CDMA NV Backup.pdb file, can some one tell me... am I wrong... the ESN is supposed to be there?? or is another number that I have to look for??
I have look backwards, foward, h...l... all the lattitudes... I even made a game w the Hex editor :D:D:p:p... someone give me light lol :rolleyes:

are you looking in the hex or the ascii side of the editor??? (hex or text search)

I use another CDMA NV Backup from another 700p and it work, is here if someone need it...

Im stuck in the last process, Its in red:

'Once NV back up is restored, you are done, you have NEW SN, SPC and MSL on handset. you can dial *228 to activate or PRL update as supported by your operator.

If you have MIN available with you then:

dial ##MSL# and edit Mobile number to your MIN and MSID to your MIN.

dial ##data# and select advance

Options Required:

1. Vocoder EVRC=1 (Most digital network support EVRC)
2. Home NID: Your operators NID code
Home NID: Your operators SID code
MCC: Your contry code
MNC: Your mobile network code"

I dont find "advance" anywere

PS: The ESN number in the CDMA NV Backup file is 363A9163
*REMEMBER IS BACKWARDS

I thinnk ,because mine is Verizon, the menu is different... I dont know

Anyone know where is the MCC and the MNC on a Verizon 700p ? I need to change it to complete the swap.

Hi everybody!

Here is my situation... I speak french and i'm not sure about all the stuff i read on this topic.... I got, because of my job via Lost&Found, a palm 700p with Telus... company of Canada... But the person who had it call them to tell the company that he/she had lost his/her Palm Treo... now it is locked and I can't use it... It's not that I do not want to return it to the owner... it is that the policy of the business I'm working for is that if it isn't reclaim after 6 months, it's yours... And trust me... in this business... you don't want to call at their home to tell them that We found their stuff... You want to leave it there and never ear about it again!! Pretty sure you understand what kind of business i'M talking about!!!

So... here's the point... could I change the ESL and the Serial Number to a new one...to be able to activate it again... I read on page 6 the procedure but... i'm not sure about all the steps because of language issues!!!

If anyone could help me by just make it realllllllllllllly clear step by step... A kind of : Change you ESL for dummy!

Thanks!!

How to make treo to run on other network by ESN repair
Perquisites:

1. Treo 700P handset
2. USB data cable
3. MTTY 1.42
4. Treo 650 boot loader driver
5. SD / MMC card. Do not use Mini / Micro SD with adaptor as mentioned on palm site. I dont know. I used MMC card.
6. Resco explorer to copy files from ROM to SD card.
7. CDMA updater program files

Attached RAR file contains:

1. Drivers
2. MTTY 1.42
3. Resco explorer
4. CDMA updater (Attached for sprint, I tested same file from verizon on my sprint phone and it works so this file must work on verizon too.)

How to do it:

1. Insert you SD card in to treo, treo will automatically create file system. Where you will see following folder tree Palm -> Launcher, all .prc files or programmes are to be copied in launcher folder. Alternatively you can hotsync these two file to your device too. If you choose hot syncing, remember to uninstall hotsync and reboot your computer, else your phone may not be detected

2. Copy CDMA updater .prc program file and *_en*.oprc language files to launcher folder of memory card.

3. Launch CDMAFirmwareUpdater.prc after a while, white screen, it will lauch, press butten similar to right click, it is bottom right button, next to ALT key, select debug, select Backup NV option, unselect all other options. and run UPDATE now.

4. After some time it will say that backup sucessful etc.

5. Launch Resco explorer, go to Drive Named RAM0 and find CDMA NV BACKUP.PDB, copy it to SD card.

6. Download file to your computer.

Here is next step to write ESN to back up file and its very important.

1. Open file with any hex editor, in my phone back up I found important data at following address:

SPC: If you want your phone to programmed by *228, then this is important code: 0000F770
MSL, this code is used to access phone nam programming: 0000F670
ESN: Esn found 3 locations, I dont know why, but when I made mistake on one location, phone kept on rebooting when I entered ##MSL# code. SO I changed ESN at all locations. ESN is in reverse

1: 0000CF00
2. 0000CFA0
3. 0000EA40

Copy modified file to Memory card.

Once you update all this, means you have prepared necessary stuff to repair SN on handset.

Then

1. Install bootloader driver.

2. Connect your handset to PC with USB cable. Press button on hotsync cable for a while, Once you get message that palm hot sync detected, dial ##UPST# and phone will be in boot loader mode.

3. Your computer will detect USBSYNC hardware.

4. Launch MTTY 1.42, select USB port and start.

5. Once connected type

cdmar bl usb

It will answer:
+CDMARouterCommnad...CDMA Mode = bl, PC Port = usb, CDMA Uart Speed = 115200

Type: nverase
Answer: Identify INTEL Combo Flash !



Identify INTEL Combo Flash !

********************************



Erase NV Item Data Done!

CDMA DBG>

Now done, Reboot phone, by disconnecting and removing battery.

Once phone is rebooted:

Insert memory card.
Launch Resco explorer
Copy back file from memory card to RAM0, when asked, overwrite existing file.
Lauch CDMA updater, and select debug, uncheck all option except restore NV.
Check and verify MSL by dialing ##MSLCODE# and ESN in phone -> option -> phone info.

Once NV back up is restored, you are done, you have NEW SN, SPC and MSL on handset. you can dial *228 to activate or PRL update as supported by your operator.

If you have MIN available with you then:

dial ##MSL# and edit Mobile number to your MIN and MSID to your MIN.

dial ##data# and select advance

Options Required:

1. Vocoder EVRC=1 (Most digital network support EVRC)
2. Home NID: Your operators NID code
Home NID: Your operators SID code
MCC: Your contry code
MNC: Your mobile network code


Special thanks to Kocoman for being very helpful in teaching me this and guiding me. This guide is posted with his permission.





I need hepl with step one... I don't get it...
1. Insert you SD card in to treo, treo will automatically create file system. Where you will see following folder tree Palm -> Launcher, all .prc files or programmes are to be copied in launcher folder. Alternatively you can hotsync these two file to your device too. If you choose hot syncing, remember to uninstall hotsync and reboot your computer, else your phone may not be detected

But.. i tried to sync the two files than... i reported me that I couldn't sync oprc file... *en*.oprc...

Don'T know why!

Help...

I need hepl with step one... I don't get it...
1. Insert you SD card in to treo, treo will automatically create file system. Where you will see following folder tree Palm -> Launcher, all .prc files or programmes are to be copied in launcher folder. Alternatively you can hotsync these two file to your device too. If you choose hot syncing, remember to uninstall hotsync and reboot your computer, else your phone may not be detected

But.. i tried to sync the two files than... i reported me that I couldn't sync oprc file... *en*.oprc...

Don'T know why!

Help...

Change the extension of the .oprc to .prc

hi there.
i have a palm 700wx from sprint, i have a working metropcs nokia :2125i
i have the serial cable to connect to the palm to the pc.

here is what i did:
(credits to Kocoman and others for the tips to do it)


1-1st, placing the phone in ##3424#, with Bitpim, i read the MSL code from the file: /nvm/nvm/nvm_security.

2-then with the MSL, i could edit the file: /nvm/$SYS.ESN, and have my ESN changed to the same than my NOKIA (the one that is in MetroPCS.)
3- once that is done using QPST i uploaded the EVDO PRL (02001.prl) from [Only Registered Users Can See Links]
4- going to ##MSL# i can program:
MDN =tendigitphonemetropcsnumber
MSID ==tendigitphonemetropcsnumber
Home SID = 4815
HOME NID = blank


the result:
i can make phone calls
i can receive phone calls
i can send text messages
i can receive text messages

to have internet i have tried so far:

connections (network management):
new connection, edit
as modem im choosing "Cellular Line"
make it to dial "#777"
username: mytendigitsmetropcsnumber@mymetropcs.com
password: metropcs
domain: blank
all the proxy setting as everywhere recommended:
wap.metropcs.net: 4423....
etc etc etc

i still can NOT get connection to internet, what setting im forgetting ?
i have all the tools, qspt, bitpim, mtty, putty, serial cable , usb cable.
i do not want spoon feeding but some clues pls !

thank you.

Change the extension of the .oprc to .prc



By the way... Do I have to change my esn to another Palm Treo 700p or I can take any other cellphone ESN?!?!? 'Cause Treo's esn (DEC) always begins by 054XXXXXXX... 'cause when i'll subscribe to get services... I want to get EDVO and stuff like that...

thanks!!

Luke.

any esn will work

By the way... Do I have to change my esn to another Palm Treo 700p or I can take any other cellphone ESN?!?!? 'Cause Treo's esn (DEC) always begins by 054XXXXXXX... 'cause when i'll subscribe to get services... I want to get EDVO and stuff like that...

thanks!!

Luke.

You are going to use the hex esn of any phone you like

I'm trying to find an ESN to flash my phone with...
I don't find anybody that has an old phone. Anyone has one to give to me by using personnal messages...


Thanks...
Ti_cluck.

Hi,

Anyone has appz to share for my Palm Treo 700p.
It would be great to take advantages of my Treo.

Thanks

You should have gone to like walmart and copy down the esn when it was released. Then use "esn fishin"g to change it around to a working one.

no saben si existe una version para iusacel mexico :D

please post only in english if you would like help

google has a translator

no saben si existe una version para iusacel mexico :D
Do you know if exist a update for Iusacell (Mexico)?

I Have a Sprint 700p, I would love to put iusacell programs to this treo. Do you think is possible?

What will I need?

Thanks

Thanks!!

Where the heck is the ESN? I am using hex workshop to locate it, and all I see is the full hex on the right hand side with "hex@sprintpcs.com" I can not find it backwards anywhere. my dump is attached. Thanx

found it, i was reading the hex completly backwards. now, if i could just get the prl installed.........

i am unable to get the phone into programing mode using ##code#. neither is *#* code ne other combination working.

please help me i have a Verizon 755p. in my old sprint 755p i used your solution it worked perfectly but for verizon it is not..

Verizon treo phones sometimes use #*#, instead of ##, so try the following:

#*#8778 (SEND)

or

#*#8778#

--------------------------------------------

Other methods of entering bootloader mode that might work on 755p/700p are:

Insert battery while pressing [volume-up] and [voice-memo]

or

Insert battery while pressing the hotsync button on the usb-cable (which is usually only found on the OEM usb hotsync data cable)

--------------------------------------------

If you mean serial diag passthru mode, when you say "programming mode", then try #*#3424 (SEND) or #*#3424#... same logic applies though, which is to try #*#, if ## doesn't work.

I don't know why the 700wx and 700p/755p have different keypress to get into the bootloader.

I have (I think) the QCOM (I wish I had ELF version somehow - with debug symbols that can load into IDA easily) of the "bootloader" of the CDMA DBG. I did the mb/mw dump (dump memory in bytes or words) and then use qedit to cut out the columns. this is the bootloader that gets loaded when you run the "Cdmar bl usb" command. I have not try to run it so I don't know if it will execute or not. you can look at it with qmat (Crc32 and some other functions)

ie:

0x00004bd4 CRC-32
0x00004dd4 CRC32 Function


Possible algos little endian: 2



Possible algos big endian: 0

---
0x000046b0 Memcpy
0x000046bb Memcpy Generic
0x0000430c __rt_udiv
0x000044f0 strlen
0x00004404 strcmp
0x0000468c __rt_div0
0x00004780 __32__rt_raise
0x000014ac rex_int_lock_32


Possible functions little endian: 8



Someone might be able to disassemble it and get some useful ideas/make a better bootloader, maybe flash radio code without using palm's tools... or put it in FTM mode (to force channel number to listen to conversations) or Download mode

(for now you can run "cdmar os uart" to put the modem in DIAG mode, then from there you can use the diag port to scan esn and phone numbers without it running Windows Mobile or PalmOS - should eliminate some 'strange freezes/takeovers from apps etc) Also the radio module is interchangeable between 700wx/700p while in this mode, the 755p is embedded radio module (I think)

(what I was hoping to do is to run the 'tethering modem' while in bootloader, thus it will prevent activesync/other strange things from interrupting the connecting. OR using the radio FW from centro to support AGPS OR using the radio FW from centro to support MEID) but maybe many years later.

For now I am working on the novatel to fix the meid problem.

Has anyone performed an ESN repair on an Alltel 700P? If so could you tell me where the ESN is located in the NV Backup. I've been successful in doing this to my Sprint 700P but am unable to find the ESN on my Alltel 700P.
Thanks
Jackie

I have a Sprint 700p im trying to swap to metro but while trying the repair I cannot find the esn in the nvbackup. I have checked in the described ways i.e. esn 12345678 searching for 78 56 34 12.

Any help would be greatly appreciated.

I have a verizon 700wx that I am trying to convert over to metro PCS thus far I have been ubable to get the ESN to change, I have changed the phone somewhat and can even get to metro when I dial *22804 and it also takes the roaming updates correctly but it still wont place calls. Im thinking that this is due to the ESN not changing. I was able to find the ESN backwards in the nvbackup file and change it to the ESN provided with my metro account and I added it backwards as well but it still shows the old one in the ##000000# setup page.

The esn is reversed in hex format. And to get a 650 to take the change, I had to erase nv first using mitty, then restore edited version (But I was doing it without a cable.).

The esn is reversed in hex format. And to get a 650 to take the change, I had to erase nv first using mitty, then restore edited version (But I was doing it without a cable.).


don't forget that the 650 requires a different command in mtty than the 700p or it will not work

don't forget that the 650 requires a different command in mtty than the 700p or it will not work

Thanks. I didn't realize that. I only have the 650 to work with.