|
Welcome to the GSM-Forum forums. You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. Only registered members may post questions, contact other members or search our database of over 8 million posts. Registration is fast, simple and absolutely free so please - Click to REGISTER! If you have any problems with the registration process or your account login, please contact contact us . |
|
Register | FAQ | Donate | Forum Rules | Root any Device | ★iPhone Unlock★ | ★ Direct Codes ★ | Direct Unlock Source |
Blackberry CDMA Blackberry CDMA phones discussion, firmwares, tutorial, media, repairs. |
| LinkBack | Thread Tools | Display Modes |
09-26-2010, 05:24 | #3 (permalink) | |
Product Supporter Join Date: May 2004 Location: INDIA Age: 55
Posts: 2,950
Member: 65063 Status: Offline Thanks Meter: 2,419 | Blackberry Esn repair Quote:
There are lot of confusions and results regarding blackberry esn repair if you want a sure shot result use cdmaworkshop lisenced version or else read below , using unicdma how esn can be repaired Here both the process are mentioned , you have to decide what suites you So here we go.. Process Strictly Confined to Educational Purposes Only By Unicdma 1) Install QXDM (2.08 Release Recommended) 2) Install Blackberry Desktop Manager (Should create two RIM Virtual Ports on PC) 3) Run Blackberry Desktop Manager the entire time (Device should show connected) 4) Using UniCDMA read MSL/SPC from the following: Sprint BB MSL/SPC are usually located here: 0x10700000-0x10720000 Blackberry 8130 Pearl Address: 0x106C0000 Length: 1703936 Address: 0x10130000 Length: 500000 Blackberry 8330 Curve Address: 0x10700000 Length: 1703936 Blackberry 8703e Address: 0x10050000 Length: 1703936 Blackberry 8800 Address: 0x10630000 Length: 1703936 Blackberry 8830 WE Address: 0x10600000 Length: 500000 5) With WinHex (or equivalent HEX Editor) search for 6-digit code in the memory dump by using the GATHER TEXT feature in the SPECIALIST menu. Use this tool to filter out unnecessary characters. I recommend setting the GATHER TEXT feature to 6 succession, only numbers and have Unicode characters tolerated. 6) Once you obtain the SPC/MSL, exit UniCDMA and run QXDM. 7) Configure QPST (globe in system tray) and QXDM to the correct ports, phone must show detected. 8) Using QXDM (ensure VIEW is set to COMMAND OUTPUT) type the following commands: a) mode offline-d Turns radio off and sets to service mode. Check phone radio is off. b) spc "******" Replace asteriks with the 6 digit code. Output should read successful. c) pr_list_wr 0 "C:\prl_1039.prl" If needed change file path to location of PRL. Output should read successful. d) nv_write sec_code {"000000"} Optional: use this command to change code to zeros or another 6 digits. e) mode reset Reboots phone to reset mode. 9) Finally, through the phone type #4357* (#HELP*) to verify the PRL write. 10) To access NAM Programming, dial ##6digitMSL and press SEND NOTE: If your PRL reverts (Sprint) back to original, you will need to disable NAM_LOCK and change the REGISTRATION ID to 2004 or your local HOME SID. QXDM NAM Lock Disable: a) nv_read nam_lock (should read enabled, which we'll change in the next command) b) nv_write nam_lock 0 0 (disables) For the Registration ID, you can change it via three common methods: UniPST, QXDM, or within the phone. UniPST Reg ID Use the RIM 7250c DLL and change the REGISTRATION ID and ID LIST to 2004 or your HOME SID QXDM Reg ID These commands will change ID to 2004, you can change the HEX values to modify it to your HOME SID 2.x Series: mode offline-d spc "000000" nv_write_item 11055 0xD4 0x07 nv_write_item 11089 0x01 0xD4 0x07 mode reset 3.x Series: mode offline-d spc "000000" requestnvitemidwrite 11055 0xD4 0x07 requestnvitemidwrite 11089 0x01 0xD4 0x07 mode reset Within Phone Reg ID Dial ##6digitMSL and press SEND Show menu, select Edit REG ID Enter your desired REG ID and remove all other entries Save changes I am sure no body will like this long risky process , but this is 100% working all depend on your skill br, | |
The Following 4 Users Say Thank You to ~AKSingh~ For This Useful Post: |
10-16-2010, 09:55 | #4 (permalink) |
No Life Poster Join Date: Oct 2005 Location: New Delhi, India Age: 45
Posts: 593
Member: 190823 Status: Offline Sonork: 100.1604079 Thanks Meter: 554 | Hi I am facing a Problam in BB 8330 (MEID Baesd) Phone version v4.5.0.66 this Phone is Issued by TATA Indicom. I have to Changed ESN succusfully. Problam in MIN Writing by Both Method Ist is CDMA Workshop v3.6.0 & 2nd is Manual Edit in Programing by ##SPC. When I Change MIN Manualy Then Show is "Invalid IMSI_S for TATA". & When I Write by CDMA Workshop after succusfull write then Automatic Change Default MIN in the Phone. Sir Please suggest me how can I Solve this Problam asap. Thanks & Regards Rajinder Aggarwal |
10-16-2010, 16:35 | #5 (permalink) |
Freak Poster Join Date: Feb 2006 Location: in ur soul
Posts: 487
Member: 234349 Status: Offline Thanks Meter: 227 | Use QXDM to reset SPC & set NAM to false ASSUMING YOU HAVE SPC ALREADY Using QXDM (ensure VIEW is set to COMMAND OUTPUT) type the following commands: mode offline-d Turns radio off and sets to service mode. Check phone radio is off. spc "000000" Replace asteriks with the 6 digit code u found using UniCDMA. Output should read successful. nv_write nam_lock 0 (VERY IMPORTANT) and some other command also try to disable min lock the command for nam lock is: nv_write nam_lock "disabled" or nv_write nam_lock disabled or nv_write nam_lock 0 can't remember very well ESN REPAIR: If the Value is 0x2A then Phone is ESN Based If the Value is 0x3A then Phone is MEID Based mode offline-d RequestNVItemRead "lock_code" RequestNVItemRead "sec_code" RequestNVItemWrite "sec_code" "000000" password **************** RequestNVItemRead scm RequestNVItemWrite scm 0x2a RequestNVItemWrite scm 0x3a RequestNVItemRead esn RequestNVItemWrite esn 0x0 (This zeros ESN) RequestNVItemWrite esn 0x00000000 (This zeros ESN) RequestNVItemRead meid RequestNVItemWrite meid 0x0000000000000000 (Use to zero) RequestNVItemWrite meid 0x00a1000001234abc (use to write actual MEID) mode reset BB REG ID (set REGID to 2004) requestnvitemidwrite 11055 0xD4 0x07 requestnvitemidwrite 11089 0x01 0xD4 0x07 (Join the two together in reverse (endian) and then proceed to convert it to decimal: D4 07 (stored) converts to 07D4 (actual output) which is 2004 (decimal output)) Reset Call Timers: RequestNVItemWrite "call_timer_g" 0 RequestNVItemWrite "life_timer_g" 0 RequestNVItemWrite "life_cnt" 0 RequestNVItemWrite "air_timer" 0 0 There is no easy way to write the PRL in 3.x |
10-17-2010, 06:04 | #6 (permalink) | |
Product Supporter Join Date: May 2004 Location: INDIA Age: 55
Posts: 2,950
Member: 65063 Status: Offline Thanks Meter: 2,419 | Quote:
http://forum.gsmhosting.com/vbb/f128...ml#post6455879 br, | |
11-10-2010, 18:09 | #9 (permalink) |
No Life Poster Join Date: Oct 2009 Location: India [UNKNOWN]
Posts: 3,257
Member: 1143809 Status: Offline Sonork: 100.1602432 Thanks Meter: 574 | ak singh upload uicdma qxdm how to do this process i cant understad how to change esn of blackberry 8330 how to use unicdma |
08-12-2011, 21:15 | #10 (permalink) |
Crazy Poster Join Date: Sep 2007 Location: Santiago, Dominican republic
Posts: 54
Member: 590076 Status: Offline Sonork: 1625972 Thanks Meter: 8 | |
01-21-2013, 18:09 | #11 (permalink) |
Junior Member Join Date: Jan 2013
Posts: 2
Member: 1870254 Status: Offline Thanks Meter: 0 | Hi, I have one CDMA Blackberry 8130 Now i want to do Min programming But i Don't have 6 Digit code please help how can i resolve this issue Esn 4CE51A49 Thanks & Regards Vishnu Sharma |
Bookmarks |
| |
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
HELP!!! BACKGROUND SCREEN LOGO | Michael Go | Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) | 8 | 11-23-2017 08:11 |
my 8810 is phone locked ,can somebody please help | duyphuc | Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) | 18 | 12-23-2014 09:03 |
Eeprom dump lost, help needed. | CAMILO | Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) | 6 | 11-29-2010 19:04 |
Help with 6110 | paulomt1 | Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) | 2 | 05-25-2009 16:29 |
Winlock 1.10 - Help | rdmfs | Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) | 3 | 06-25-1999 08:21 |
|