HOWTO: To change 700p ESN without bitpim/CRC patch etc.

Discussion of the 700p.

Moderator:kocoman

Post Reply
sexyrahh
Newbie
Posts:1
Joined:Sat Sep 22, 2007 5:29 am
Re: HOWTO: To change 700p ESN without bitpim/CRC patch etc.

Post by sexyrahh » Sat Sep 22, 2007 5:35 am

Hello i have two sprint treo 700p and i needwant to change the esn so i can get them activated..i had them in my ex namew.. and now she and ex... so please could you help.. sexyrahh@yahoo.com

kocoman
Techie
Posts:91
Joined:Sat Oct 21, 2006 7:15 am

Re: HOWTO: To change 700p ESN without bitpim/CRC patch etc.

Post by kocoman » Sat Sep 22, 2007 8:12 am

Which part do you need help with? I have someone who change ESN successfully by reading my howto.
6b 6f 63 6f 6d 61 6e 20 6f 66 20 63 64 6d 61 2d 64 65 76 2d 74 65 61 6d

prominator
Minion
Posts:23
Joined:Sat Sep 29, 2007 1:21 am

Re: HOWTO: To change 700p ESN without bitpim/CRC patch etc.

Post by prominator » Mon Oct 01, 2007 11:53 pm

it is hard to follow your tutorial

kocoman
Techie
Posts:91
Joined:Sat Oct 21, 2006 7:15 am

Re: HOWTO: To change 700p ESN without bitpim/CRC patch etc.

Post by kocoman » Tue Oct 02, 2007 1:19 am

I posted another one that another user wrote for me, hopefully its more understandable.

How to make treo to run on other network by ESN repair
Perquisites:

1. Treo 700P handset
2. USB data cable
3. MTTY 1.42
4. Treo 650 boot loader driver
5. SD / MMC card. Do not use Mini / Micro SD with adaptor as mentioned on palm site. I dont know. I used MMC card.
6. Resco explorer to copy files from ROM to SD card.
7. CDMA updater program files

Attached RAR file contains:

1. Drivers
2. MTTY 1.42
3. Resco explorer
4. CDMA updater (Attached for sprint, I tested same file from verizon on my sprint phone and it works so this file must work on verizon too.)

How to do it:

1. Insert you SD card in to treo, treo will automatically create file system. Where you will see following folder tree Palm -> Launcher, all .prc files or programmes are to be copied in launcher folder. Alternatively you can hotsync these two file to your device too. If you choose hot syncing, remember to uninstall hotsync and reboot your computer, else your phone may not be detected

2. Copy CDMA updater .prc program file and *_en*.oprc language files to launcher folder of memory card.

3. Launch CDMAFirmwareUpdater.prc after a while, white screen, it will lauch, press butten similar to right click, it is bottom right button, next to ALT key, select debug, select Backup NV option, unselect all other options. and run UPDATE now.

4. After some time it will say that backup sucessful etc.

5. Launch Resco explorer, go to Drive Named RAM0 and find CDMA NV BACKUP.PDB, copy it to SD card.

6. Download file to your computer.

Here is next step to write ESN to back up file and its very important.

1. Open file with any hex editor, in my phone back up I found important data at following address:

SPC: If you want your phone to programmed by *228, then this is important code: 0000F770
MSL, this code is used to access phone nam programming: 0000F670
ESN: Esn found 3 locations, I dont know why, but when I made mistake on one location, phone kept on rebooting when I entered ##MSL# code. SO I changed ESN at all locations. ESN is in reverse

1: 0000CF00
2. 0000CFA0
3. 0000EA40

Copy modified file to Memory card.

Once you update all this, means you have prepared necessary stuff to repair SN on handset.

Then

1. Install bootloader driver.

2. Connect your handset to PC with USB cable. Press button on hotsync cable for a while, Once you get message that palm hot sync detected, dial ##UPST# and phone will be in boot loader mode.

3. Your computer will detect USBSYNC hardware.

4. Launch MTTY 1.42, select USB port and start.

5. Once connected type

cdmar bl usb

It will answer:
+CDMARouterCommnad...CDMA Mode = bl, PC Port = usb, CDMA Uart Speed = 115200

Type: nverase
Answer: Identify INTEL Combo Flash !



Identify INTEL Combo Flash !

********************************



Erase NV Item Data Done!

CDMA DBG>

Now done, Reboot phone, by disconnecting and removing battery.

Once phone is rebooted:

Insert memory card.
Launch Resco explorer
Copy back file from memory card to RAM0, when asked, overwrite existing file.
Lauch CDMA updater, and select debug, uncheck all option except restore NV.
Check and verify MSL by dialing ##MSLCODE# and ESN in phone -> option -> phone info.

Once NV back up is restored, you are done, you have NEW SN, SPC and MSL on handset. you can dial *228 to activate or PRL update as supported by your operator.

If you have MIN available with you then:

dial ##MSL# and edit Mobile number to your MIN and MSID to your MIN.

dial ##data# and select advance

Options Required:

1. Vocoder EVRC=1 (Most digital network support EVRC)
2. Home NID: Your operators NID code
Home NID: Your operators SID code
MCC: Your contry code
MNC: Your mobile network code


Special thanks to Kocoman for being very helpful in teaching me this and guiding me. This guide is posted with his permission.
6b 6f 63 6f 6d 61 6e 20 6f 66 20 63 64 6d 61 2d 64 65 76 2d 74 65 61 6d

Constantine
Newbie
Posts:2
Joined:Sun Oct 07, 2007 11:19 am

Re: HOWTO: To change 700p ESN without bitpim/CRC patch etc.

Post by Constantine » Sun Oct 07, 2007 11:29 am

Where are the Attached Files.I didnt Find anywhere.Please Post or Send me at My Email ID moderate_sam@yahoo.com

Regards,
Constantine...@

kocoman
Techie
Posts:91
Joined:Sat Oct 21, 2006 7:15 am

Re: HOWTO: To change 700p ESN without bitpim/CRC patch etc.

Post by kocoman » Sun Oct 07, 2007 2:37 pm

Find them at mobile-files.com 700p esn thread. Don't want shadowmite get trouble with palm (DUN hacks)
6b 6f 63 6f 6d 61 6e 20 6f 66 20 63 64 6d 61 2d 64 65 76 2d 74 65 61 6d

Constantine
Newbie
Posts:2
Joined:Sun Oct 07, 2007 11:19 am

Re: HOWTO: To change 700p ESN without bitpim/CRC patch etc.

Post by Constantine » Mon Oct 08, 2007 1:44 am

kocoman wrote:Find them at mobile-files.com 700p esn thread. Don't want shadowmite get trouble with palm (DUN hacks)

Thanks i found the Attached Files at the mentioned link.

I will try and post the result.

Wbr,
Constantine..

horton72
Newbie
Posts:1
Joined:Wed Apr 01, 2009 4:35 pm

Re: HOWTO: To change 700p ESN without bitpim/CRC patch etc.

Post by horton72 » Wed Apr 01, 2009 4:46 pm

hello everybodi, sorry no hablo ingles soy de acapulco mexico, ya hice todo el procedimiento para liberar una treo 755p lo unico que no puedo modificar es el nvm backup con otro esn no se usar el editor tengo ya el numero de telefono el esn y el mid que le quiero poner pero no se como hacerle. alguien me puede ayudar ? gracias y saludos :(

m4f1050
Newbie
Posts:7
Joined:Sun Oct 05, 2008 9:58 pm
Location:O-town
Contact:

Re: HOWTO: To change 700p ESN without bitpim/CRC patch etc.

Post by m4f1050 » Mon May 25, 2009 12:50 am

I think it's easier to do the QPST EFS Explorer, go to nvm folder and $SYS$.ESN and edit the file, use CDMA Workshop to calculate the checksum, the last 12 characters on the file 1-4 are ESN backwards, 5-8 checksum backwards and 9-12 do not change. Write $SYS$.ESN back on phone and reset.

BiggDadd73
Newbie
Posts:1
Joined:Tue Jun 30, 2009 9:40 am

Re: HOWTO: To change 700p ESN without bitpim/CRC patch etc.

Post by BiggDadd73 » Tue Jun 30, 2009 9:53 am

What happens if the last four digits are changed in error? Is there anyway to find out what they were? I am not able to get a signal, phone just roams...and I have verified every EPST setting and double and triple checked the ESN and Checksum (both are correct)
Any help would be appreciated...

panto77
Newbie
Posts:1
Joined:Wed Apr 21, 2010 10:43 am

Re: HOWTO: To change 700p ESN without bitpim/CRC patch etc.

Post by panto77 » Wed Apr 21, 2010 10:45 am

Hey man!

Can you share the information with us too?
I have Treo 700p for Verizon. I am looking to flash my phone to use with Cricket service.
Please send me here: panto77@yahoo.com

Post Reply