[Q] HTCONE 16 Digit Security Code - Sprint HTC One (M7)

Does anyone know the 16 digit security code for this phone? For use with CDMA Workshop.
And does anybody know how to get the AAA Shared Secret Key also?

I can find "secret" (0x736563726574) which is what the HA Shared Secret should be, in dumps of both cdma_record.img and radio_config.img with a hex editor so I'm thinking the AAA Shared Secret should also be in those but I wouldn't know where to look.

It has been a while since I have used cdma workshop but if I am not mistaken you can use cdma workshop to read the code....

No CDMA Workshop wont read it. I've tried all known methods I could find

What do you need the code for?
Sent from my HTCONE using Tapatalk 4 Beta

Oh, I just want the code for my personal records. I like to have everything backed up.
I was able to get my AAA password using the "open sesame door" method and reading "/nvm/num/1192" in the embedded file system. Also, just to note, you can also find the code and your SPC/MSL, or probably any cdma related stuff in the radio_config partition. I'm guessing I'll be able to find the security password in there. And hopefully my CAVE A-Key. I'm dumping the whole eMMC right now.

Related

Need help "fixing" a HERO that was working on MetroPCS

So I got this HTC HERO yesterday from this guy.
I had a hard time getting it to switch/activate to my account on Metro.
Seems the MSL was reset and 000000 wasn't working.
Used CDMA workshop to find out what it had changed to, set it to 000000. Then I was able to edit the MDN MSID and get the phone to work and update PRL via *228.
But Data didn't work.
I used the universal root, used clockwork app to flash amon_ra recovery, made a backup.
And before I got a chance to edit the previous users' gmail/market info, he changed his password, so I couldn't find a way to change that. I used recovery to factory reset/wipe the phone and went through the set up wizard.
Data still doesn't work.
I flashed the Cricket/metropcs mms/web fix, but the phone has stock 1.5 on it, so that didn't make a difference. I am getting an error 67 now though.
Just tried to flash damage control, but it froze at the X animation after a long while or animating..
Just restored back up.
Anyone care to throw a dog a bone, I need some links/threads any help to get this working again.
thanks,.
-CC
http://forum.xda-developers.com/showthread.php?t=647249&page=2
page about switching phone from Sprint to PagePlus (Verizon) you will get the error 67 unless you are using sprint so diregard that, I dont know if these settings would work for you...but worth a shot right?
quick look up for info:
mmsc string: mms.metropcs.net/mmsc:3128
hahah sweet here ya go my man
Remove your MicroSD card and plug the phone into your PC via USB cable then open QPST (QPST Configuration, then go to Start Clients and select Service Programming) and then read the phone.
Once you read the phone, go to the m.ip tab and change from mobile ip to simple ip. Then look at the first 2 user profiles under m.ip open each one up and change the Nai to [email protected], for both standard and tethered...
remove any ip address that you find in these 2 profiles. and remove any other profiles except the first 2.
also make sure both of them say enabled.
Now go to ppp config tab...
look at the tabs that say um and an... under these 2 tabs,, the user id should be [email protected] tethered id should be the same,, password is metropcs in lowercase on both tabs, remove any dns ip address you find in either tab also. just make sure all ip address are blank.
once you are completed with this make sure you write to the phone and move on to the next step..
Step 2.
click on phone icon (on the phone)
click on the dialer..
enter ##3282#
click user name
click edit
enter your spc which should already be 000000 by now
Here are the settings:
User Name "[email protected]"
SPI MN-HA "1234"
SPI MN-AAA "1234"
M Home Address "000.000.000.000"
Prim Ha Ip "255.255.255.255"
Sec Ha Ip "255.255.255.255"
Rev Tunneling "Off"
AAA Password "metropcs"
HA Password "metropcs"
click done and allow the phone to reboot...
Step 3.
Now do ##3282# again.. this time go to browser
click edit
enter spc
youll see gateway1 and gateway2, under both of these
you will see primary and secondary,,, set primary and secondary ip`s for both gateways to 010.223.002.004,, they will all be the same ip address,, and set the Port 3128 and secure Port 443 for all gatways to ,, hit done and reboot.
Also this should work on quite a few other Sprint phones,,
This is what I do for a living at the wireless company I work for,, and so far it has worked on Samsung upstage, Instinct,, Sanyo katana, and many others,,,
all that info is from a page linked from howardforums.. heres the offical link: http://www.howardforums.com/showthr...nstinct-Web-WAP-Settings-(working-100-)?pp=15
Step 3.
Now do ##3282# again.. this time go to browser
click edit
enter spc
youll see gateway1 and gateway2, under both of these
you will see primary and secondary,,, set primary and secondary ip`s for both gateways to 010.223.002.004,, they will all be the same ip address,, and set the Port 3128 and secure Port 443 for all gatways to ,, hit done and reboot.
Cool thanks, this is the only thing different from other guides I have followed. Appreciate your time and help.
I've seen people running phones on Metro without rooting or custom roms, so I know it's all got to be in the phone's settings, once it's been houdini "flashed" (esn added to metro's database).. That's how this phone came, guess we lost all the settings when we reset to factory somehow..
-CC
clockcycle said:
Step 3.
Now do ##3282# again.. this time go to browser
click edit
enter spc
youll see gateway1 and gateway2, under both of these
you will see primary and secondary,,, set primary and secondary ip`s for both gateways to 010.223.002.004,, they will all be the same ip address,, and set the Port 3128 and secure Port 443 for all gatways to ,, hit done and reboot.
Cool thanks, this is the only thing different from other guides I have followed. Appreciate your time and help.
I've seen people running phones on Metro without rooting or custom roms, so I know it's all got to be in the phone's settings, once it's been houdini "flashed" (esn added to metro's database).. That's how this phone came, guess we lost all the settings when we reset to factory somehow..
-CC
Click to expand...
Click to collapse
Did it work for you?
TpyoKnig said:
Did it work for you?
Click to expand...
Click to collapse
Unfortunatly no. It is not saving the password in qpst. But if I look at the settings thru the phone with ##778talk it shows them correctly but still no data.
One tut I followed metions using the msl and proxy.metropcs.net instead. I finally got the phone to give me an error 131, invalid or wrong user name or password.
Read another tut that suggests using [email protected], gonna try that next.
Baffling, I've been doing metropcs phones since 2004 motorola razor. First android though.
-CC
EDIT: Same error, unit just can't get data
Anyone mind sharing your working ROM and or Nandroid back up? I would really like to get this Hero working again, it's not being cooperative
Thanks,
-CC
clockcycle said:
Anyone mind sharing your working ROM and or Nandroid back up? I would really like to get this Hero working again, it's not being cooperative
Thanks,
-CC
Click to expand...
Click to collapse
Clockcycle, what you need is the settings within EPST ( ##3282# ) for your provider and the APN File ?
TpyoKnig said:
Clockcycle, what you need is the settings within EPST ( ##3282# ) for your provider and the APN File ?
Click to expand...
Click to collapse
Got it working, did 3 things. Changed password to msl made by whiterabbit site instead of metropcs or the phone's msl.. Changed 2 other settings; CDMA only and flashed token's 3 instead of 3.5.
Icon changed to 1x with data arrows and a 1x D, web, mms, market all working!
Thanks.
-CC
clockcycle said:
Got it working, did 3 things. Changed password to msl made by whiterabbit site instead of metropcs or the phone's msl.. Changed 2 other settings; CDMA only and flashed token's 3 instead of 3.5.
Icon changed to 1x with data arrows and a 1x D, web, mms, market all working!
Thanks.
-CC
Click to expand...
Click to collapse
Hrm, i remember when I was flashing my phone from Sprint to PagePlus that the Data connection was reduced from EVDO to 1x due to the PRL , so maybe try an updated PRL so that you can get EVDO
Hey guys, i need MAJOR help.
So i tried these setting to get my internet to work, but all it did was make my data icon disappear, and now i have no clue on what to do....please need lots of help.
and yes i have been googling for multiple articles/forums ect.
nikefreeek51 said:
Hey guys, i need MAJOR help.
So i tried these setting to get my internet to work, but all it did was make my data icon disappear, and now i have no clue on what to do....please need lots of help.
and yes i have been googling for multiple articles/forums ect.
Click to expand...
Click to collapse
PM me..10char
PM has been sent
I also need help with this. I don't get pm me?/? please any help will be most welcome

How to scan MEID locations in CDMA workshop 2.7

I think this tutorial is long over due. There are guides out there for individual basebands but if you don't want to go searching and want to learn how to do it your self hopefully this guide can help. If it does, don't forget the thank you button.
Your first step obviously is to get all the drivers you need to hook your phone up to CDMA workshop, so download any diagnostic drivers you may need. One other thing you need is some type of hex editor. Winhex works great. You can get it here.
http://x-ways.net/winhex/
Once that's done we can move on.
1.) Open up cdma workshop and connect your phone and then click read. Proceed to the security tab and enter your spc code and send it to the phone to unlock it.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
2.) Go to the memory tab and click start under memory scan. Just leave the fields the way they are.
you should get something like
Scanning memory for readable areas:
Unreadable area from: 0000:0000
Readable area from: 00FA:0000
Unreadable area from: 0100:0000
Readable area from: 0109:0000
Unreadable area from: 01DC:0000
Process is stopped at: C000:0000
You shouldn't have to sit there through the entire scan. After you get the two readable areas and two unreadable areas you can stop the scan, but it's not mandatory.
3.) Now for the tricky part. I'm not sure if this is how you figure out the number of bytes you need but it works fine for me. The memory is readable from 00FA:0000 to 0100:0000 so we take the number 0100:0000 and subtract it from 00FA:0000 and convert it to a decimal. To do this use the calculator tool in Windows. So open the calculator and click view and select programmer.
Now punch in 1000000. (The first zero doesn't matter, the same goes for the other address.) Then click subtract and punch in FA0000(of course replacing these addresses with the ones in your scan). Now when I hit equals I get the hex number 60000. To convert this to a decimal simply select dec.
As you can see I get the number 393216.
4.) Now in the memory / Eeprom area put in the number you calculated where it says bytes. Put in the first readable area in the start address field. Now click read and it will prompt you to save the file somewhere so go ahead and do that.
5.) Now take your MEID number and put it in pairs of two then reverse them. For example if your MEID is A1000067452301 pair it like so
A1 00 00 67 45 23 01 and reverse it like so
01 23 45 67 00 00 A1 remove the spaces and you get 012345670000A1
6.) Open the saved file in Winhex and press ctrl, alt and x. This will bring up a window so you can search certain hex numbers. Put in your reversed MEID without the spaces.
Click OK and it will take you to the first MEID it finds.
The address to the left of my MEID is 0000C590(or just C590) and the column for the beginning of my MEID is 4. Add 4 to C590 and you get C594. To get the first MEID address take the number you start the scan with(mine was FA0000) and add C594 to it. I get FAC594. This will be your first MEID address. Write it down and move on to the next. If you press ctrl, alt and x and hit OK it will take you to the same address you were just at so what I do is change one of the numbers and then search again like so.
I changed the first pair to 00 so I can continue searching for MEID addresses. Continue this process for the rest of this file then you must do step 3-6 with your second readable areas. Mine again was 0109:0000 - 01DC:0000. The second readable area takes a very long time. My bytes ended up being 13,828,096.
7.) The last thing I did was do the entire process again only I put the phone in airplane mode. This may or may not be necessary. This same process can also be used to find your ESN locations. Just search the same files but put your reversed ESN in the search window in Winhex.
Overall it is a very time consuming process but if you do everything correct it can save you a lot of time as opposed to looking up addresses someone else has posted. I have tried in the past and people with the same baseband had completely different addresses.
I hope this helps and don't forget the Thank You button if it does.
Dude you really kick ass! I have been looking for something like this forever. This should be stickied. I always wondered what range of addresses to look for and now I know. Way to go bro Got a donation account? I would love to contribute to the help you have given me.
metalheavy said:
Dude you really kick ass! I have been looking for something like this forever. This should be stickied. I always wondered what range of addresses to look for and now I know. Way to go bro Got a donation account? I would love to contribute to the help you have given me.
Click to expand...
Click to collapse
No problem, Theres a donation button under my name on the left of my post. It's funny because I was searching for some kind of guide like this myself for the longest time then one day I just kind of figured it out on my own.
everything done changed success but now I have two bin files locally ... how do i write them to phone? trying same as Read button but write and it give me error
Range check ERROR. any ideas?
please let me know, thanks!
d00nald said:
everything done changed success but now I have two bin files locally ... how do i write them to phone? trying same as Read button but write and it give me error
Range check ERROR. any ideas?
please let me know, thanks!
Click to expand...
Click to collapse
You're going to have to be mores specific I'm not sure what you're asking.
weinerwad3000 said:
You're going to have to be mores specific I'm not sure what you're asking.
Click to expand...
Click to collapse
I folow your nice instruction step by step,
Scanning memory for readable areas:
Unreadable area from: 0000:0000
Readable area from: 00FA:0000
Unreadable area from: 0100:0000
Readable area from: 0109:0000
Unreadable area from: 01DC:0000
Process is stopped at: C000:0000
then i've calculate and memory eprom and i save the files
then i have open with winhex and modify them, not a problem
but now my question how do i upload them back to memory eprom phone?
once I tried via same memory eprom button write those modified bin files and it giving me error message "Range check ERROR"
I need to upload those bin files to phone back
hope now is understandable, please let me know, thank you!
i trying to make the phone for my self only
d00nald said:
I folow your nice instruction step by step,
Scanning memory for readable areas:
Unreadable area from: 0000:0000
Readable area from: 00FA:0000
Unreadable area from: 0100:0000
Readable area from: 0109:0000
Unreadable area from: 01DC:0000
Process is stopped at: C000:0000
then i've calculate and memory eprom and i save the files
then i have open with winhex and modify them, not a problem
but now my question how do i upload them back to memory eprom phone?
once I tried via same memory eprom button write those modified bin files and it giving me error message "Range check ERROR"
I need to upload those bin files to phone back
i need to change it.
hope now is understandable, please let me know, thank you!
i trying to make the phone for my self only
Click to expand...
Click to collapse
You're not supposed to upload the bin files. This is just to find esn locations. Once you have the locations you use qxdm to find the esn and meid and change them there.
weinerwad3000 said:
I think this tutorial is long over due. There are guides out there for individual basebands but if you don't want to go searching and want to learn how to do it your self hopefully this guide can help. If it does, don't forget the thank you button.
Your first step obviously is to get all the drivers you need to hook your phone up to CDMA workshop, so download any diagnostic drivers you may need. One other thing you need is some type of hex editor. Winhex works great. You can get it here.
http://x-ways.net/winhex/
Once that's done we can move on.
1.) Open up cdma workshop and connect your phone and then click read. Proceed to the security tab and enter your spc code and send it to the phone to unlock it.
2.) Go to the memory tab and click start under memory scan. Just leave the fields the way they are.
you should get something like
Scanning memory for readable areas:
Unreadable area from: 0000:0000
Readable area from: 00FA:0000
Unreadable area from: 0100:0000
Readable area from: 0109:0000
Unreadable area from: 01DC:0000
Process is stopped at: C000:0000
You shouldn't have to sit there through the entire scan. After you get the two readable areas and two unreadable areas you can stop the scan, but it's not mandatory.
3.) Now for the tricky part. I'm not sure if this is how you figure out the number of bytes you need but it works fine for me. The memory is readable from 00FA:0000 to 0100:0000 so we take the number 0100:0000 and subtract it from 00FA:0000 and convert it to a decimal. To do this use the calculator tool in Windows. So open the calculator and click view and select programmer.
Now punch in 1000000. (The first zero doesn't matter, the same goes for the other address.) Then click subtract and punch in FA0000(of course replacing these addresses with the ones in your scan). Now when I hit equals I get the hex number 60000. To convert this to a decimal simply select dec.
As you can see I get the number 393216.
4.) Now in the memory / Eeprom area put in the number you calculated where it says bytes. Put in the first readable area in the start address field. Now click read and it will prompt you to save the file somewhere so go ahead and do that.
5.) Now take your MEID number and put it in pairs of two then reverse them. For example if your MEID is A1000067452301 pair it like so
A1 00 00 67 45 23 01 and reverse it like so
01 23 45 67 00 00 A1 remove the spaces and you get 012345670000A1
6.) Open the saved file in Winhex and press ctrl, alt and x. This will bring up a window so you can search certain hex numbers. Put in your reversed MEID without the spaces.
Click OK and it will take you to the first MEID it finds.
The address to the left of my MEID is 0000C590(or just C590) and the column for the beginning of my MEID is 4. Add 4 to C590 and you get C594. To get the first MEID address take the number you start the scan with(mine was FA0000) and add C594 to it. I get FAC594. This will be your first MEID address. Write it down and move on to the next. If you press ctrl, alt and x and hit OK it will take you to the same address you were just at so what I do is change one of the numbers and then search again like so.
I changed the first pair to 00 so I can continue searching for MEID addresses. Continue this process for the rest of this file then you must do step 3-6 with your second readable areas. Mine again was 0109:0000 - 01DC:0000. The second readable area takes a very long time. My bytes ended up being 13,828,096.
7.) The last thing I did was do the entire process again only I put the phone in airplane mode. This may or may not be necessary. This same process can also be used to find your ESN locations. Just search the same files but put your reversed ESN in the search window in Winhex.
Overall it is a very time consuming process but if you do everything correct it can save you a lot of time as opposed to looking up addresses someone else has posted. I have tried in the past and people with the same baseband had completely different addresses.
I hope this helps and don't forget the Thank You button if it does.
Click to expand...
Click to collapse
Thanks for posting this! I really appreciate it.
Just curious on how to actually convert what I find from WinHex to the address I search in QXDM ie: 0x00000000. Also what if the MEID or ESN starts on a letter column? Just replace the last number/letter with the letter of the column? Thanks for all the help, been a week for me so far trying to do this damn evo on boost lol
weinerwad3000 said:
2.) Go to the memory tab and click start under memory scan. Just leave the fields the way they are.
you should get something like
Scanning memory for readable areas:
Unreadable area from: 0000:0000
Readable area from: 00FA:0000
Unreadable area from: 0100:0000
Readable area from: 0109:0000
Unreadable area from: 01DC:0000
Process is stopped at: C000:0000
Click to expand...
Click to collapse
When I start the scan I get an error almost immediatly. The error reads: "Process is stopped. Phone does not answer." After that my phone turns off. Here is the log of what CDMA WS said:
Code:
Scanning memory for readable areas:
Readable area from: 0000:0000
Process is stopped at: 0001:0000
Please PM me if anyone knows how to fix this.
gabycool said:
When I start the scan I get an error almost immediatly. The error reads: "Process is stopped. Phone does not answer." After that my phone turns off. Here is the log of what CDMA WS said:
Code:
Scanning memory for readable areas:
Readable area from: 0000:0000
Process is stopped at: 0001:0000
Please PM me if anyone knows how to fix this.
Click to expand...
Click to collapse
Did you send the spc to the phone.
trying to flash droid razrs to even get 1x data, using dfs writing "vzw" for ha and aaa keys and still no data! any help? all i need is 1x
moparfreak426 said:
trying to flash droid razrs to even get 1x data, using dfs writing "vzw" for ha and aaa keys and still no data! any help? all i need is 1x
Click to expand...
Click to collapse
What service do you have?
moparfreak426 said:
trying to flash droid razrs to even get 1x data, using dfs writing "vzw" for ha and aaa keys and still no data! any help? all i need is 1x
Click to expand...
Click to collapse
Try a service like remotesquad.com Flashing to PagePlus, Selectel or NextG it will get 3g on the devices. Their is also an option for 1x if preferred.
weinerwad3000 said:
You're not supposed to upload the bin files. This is just to find esn locations. Once you have the locations you use qxdm to find the esn and meid and change them there.
Click to expand...
Click to collapse
Please help with a guide/tutorial to change the ESN and MEID for samsung SPH-D710 - Samsung galaxy S2. Please
samkit369 said:
Please help with a guide/tutorial to change the ESN and MEID for samsung SPH-D710 - Samsung galaxy S2. Please
Click to expand...
Click to collapse
I have an s4 so I'll see if its similar.
samkit369 said:
Please help with a guide/tutorial to change the ESN and MEID for samsung SPH-D710 - Samsung galaxy S2. Please
Click to expand...
Click to collapse
What have you tried so far. Have you tried hooking your phone up to cdma workshop or qxdm?
weinerwad3000 said:
What have you tried so far. Have you tried hooking your phone up to cdma workshop or qxdm?
Click to expand...
Click to collapse
i dont have a cracked version of the latest cdma workshop 3.x
i found one cracked version 2.7. it only allowed to write ESN. no way to change MEID. so i tried the default way. it didnt happen. then tried with the Samsung V & S series settings. it didnot the write the ESN i entered 809EFC02, but instead changed it to sumthng else totally - 0xAC2AA175. This also become my MEID strangely.
I have a Reliance phone. I went to activate the number. they said my RSN is damaged. A000003969E226 this was my MEID earlier. i checked the back of my phone. there A0000039307C63 this was my MEID. I need to fix this. Please help me
samkit369 said:
i dont have a cracked version of the latest cdma workshop 3.x
i found one cracked version 2.7. it only allowed to write ESN. no way to change MEID. so i tried the default way. it didnt happen. then tried with the Samsung V & S series settings. it didnot the write the ESN i entered 809EFC02, but instead changed it to sumthng else totally - 0xAC2AA175. This also become my MEID strangely.
I have a Reliance phone. I went to activate the number. they said my RSN is damaged. A000003969E226 this was my MEID earlier. i checked the back of my phone. there A0000039307C63 this was my MEID. I need to fix this. Please help me
Click to expand...
Click to collapse
First off you shouldn't use cdma workshop to flash your phone. cdma workshop is used to unlock the phone and scan locations as well as a few other things. I don't have time tonight to go into detail on what to do but i will get back to you tomorrow. In the mean time I suggest you do a lot of reading on how to flash phones. Look up the evo 4g to boost tutorials to get a good idea of what you're going to need to do. I'll get back with you when I have more time probably sometime tomorrow late afternoon. Also you made a rookie mistake by posting your meid and ESN in a public forum. People can clone your phone with that info. I suggest you edit your post and delete that sh*t.
what phone are you using as the donor? What provider are you using?

Got a weird issue. Looking for help.

Ok. So I did a NV flash on both my wife's and my steak 7. Well apparently tthe NV flash files I used had pt23 in it and now I have two tablets with identical Mac addresses. Now I know what this means as I have managed many networks before. My router is no kicking me and my wife off one at a time every so often as we have an IP conflict. What I'm looking for is either a way to edit the pt23.img of the NV flash fileto have the correct info for each tablet. Or is there a way to issue a Mac address to a tablet through adb or something like that. I figure I can get the true info by taking the tablet apart. That's not a issue. Just need to know how to issue the info once I get it.
GUIDE
scarmon25 said:
Ok. So I did a NV flash on both my wife's and my steak 7. Well apparently tthe NV flash files I used had pt23 in it and now I have two tablets with identical Mac addresses. Now I know what this means as I have managed many networks before. My router is no kicking me and my wife off one at a time every so often as we have an IP conflict. What I'm looking for is either a way to edit the pt23.img of the NV flash fileto have the correct info for each tablet. Or is there a way to issue a Mac address to a tablet through adb or something like that. I figure I can get the true info by taking the tablet apart. That's not a issue. Just need to know how to issue the info once I get it.
Click to expand...
Click to collapse
DO THE FOLLOWING AT YOUR OWN RISK DO NOT BLAME ANYONE BUT YOURSELF FOR FAILURE.
I'm assuming this is honeycomb. and if so here what I did. I'm not sure you can change the mac but here is a guide to help.
You may can even change the IP addresses in your devices to a static IP.
I did the same thing by accident myself. You have successfully changed Dell service tag, MAC, ppid and if its 3g the imei.
1). find all of these numbers and if you know your mac address get it too. Write all of these down for the edit.
2). Get yourself HxD this a hex code editor.Then Install on your computer.
3). open the p 23 file that you flashed. Starting on line 200 going into 210 is your ppid place your cursor on the line just before the number on the far right of the editor DO NOT HIGHLIGHT. just start typing and it will replace each number.
4). On line 220 four spaces in, is your Service tag change it.
5). Save
This completes the rewrite for p23.
6). open p 24 the first and second lines are mac addresses line 00 is WIFI and 10 is bluetooth. As you will see both numbers will be the same except the last letter. Change accordingly. WIFI will be a letter before the bluetooth.
7).FLASH( i just replaced the files and NVFLASHED the whole set again just to make sure there were no problems.
Hope this helps.
My Streak is wifi only maybe someone else can chime in on how the change for the imei.
---------- Post added at 09:51 AM ---------- Previous post was at 09:36 AM ----------
Found this link too.
http://www.tabletroms.com/forums/honeycomb-streak-7/3402-service-tag-help.html
datfat said:
DO THE FOLLOWING AT YOUR OWN RISK DO NOT BLAME ANYONE BUT YOURSELF FOR FAILURE.
I'm assuming this is honeycomb. and if so here what I did. I'm not sure you can change the mac but here is a guide to help.
You may can even change the IP addresses in your devices to a static IP.
I did the same thing by accident myself. You have successfully changed Dell service tag, MAC, ppid and if its 3g the imei.
1). find all of these numbers and if you know your mac address get it too. Write all of these down for the edit.
2). Get yourself HxD this a hex code editor.Then Install on your computer.
3). open the p 23 file that you flashed. Starting on line 200 going into 210 is your ppid place your cursor on the line just before the number on the far right of the editor DO NOT HIGHLIGHT. just start typing and it will replace each number.
4). On line 220 four spaces in, is your Service tag change it.
5). Save
This completes the rewrite for p23.
6). open p 24 the first and second lines are mac addresses line 00 is WIFI and 10 is bluetooth. As you will see both numbers will be the same except the last letter. Change accordingly. WIFI will be a letter before the bluetooth.
7).FLASH( i just replaced the files and NVFLASHED the whole set again just to make sure there were no problems.
Hope this helps.
My Streak is wifi only maybe someone else can chime in on how the change for the imei.
---------- Post added at 09:51 AM ---------- Previous post was at 09:36 AM ----------
Found this link too.
http://www.tabletroms.com/forums/honeycomb-streak-7/3402-service-tag-help.html
Click to expand...
Click to collapse
awesome man. thanks so much, one question. what did you use to open or decompile the p23.img and p24.img will the hxd editor do this?
NM just figured it out. one last question. did you have to take yours apart to get the info or did you find anotther way?
Also mine is wifi only too. so your guide is perfect. man you are seriously awesome. thanks a ton
scarmon25 said:
awesome man. thanks so much, one question. what did you use to open or decompile the p23.img and p24.img will the hxd editor do this?
NM just figured it out. one last question. did you have to take yours apart to get the info or did you find anotther way?
Also mine is wifi only too. so your guide is perfect. man you are seriously awesome. thanks a ton
Click to expand...
Click to collapse
I did not take mine apart to find the mac yet. since mine was not having the conflicts I decided to wait.
datfat said:
I did not take mine apart to find the mac yet. since mine was not having the conflicts I decided to wait.
Click to expand...
Click to collapse
Right on. Do you think I could use a Mac generator and just general new ones. Or just change the last letters on the two that's there?
scarmon25 said:
Right on. Do you think I could use a Mac generator and just general new ones. Or just change the last letters on the two that's there?
Click to expand...
Click to collapse
I haven't used a generator before. Changing it may work as long as you dont have a duplicate in your network. Im not 100% sure though. Also the ppid and service tag are printed in the sd card cover and on the box if you have it. I forgot to mention this in my post before
datfat said:
I haven't used a generator before. Changing it may work as long as you dont have a duplicate in your network. Im not 100% sure though. Also the ppid and service tag are printed in the sd card cover and on the box if you have it. I forgot to mention this in my post before
Click to expand...
Click to collapse
Yeah I saw that when I was looking at it. I have made sure the Mac I want to use isn't on the network anywhere. Do I need to do anything with the PPID?
scarmon25 said:
Yeah I saw that when I was looking at it. I have made sure the Mac I want to use isn't on the network anywhere. Do I need to do anything with the PPID?
Click to expand...
Click to collapse
The Dell service tag and ppid are your device identifiers for any service issues with dell since your probably rooted any warranty you may have had is void (supposedly) . The mac address is probably the main concern I'm sure. so you dont have to change the p23 at all, unless you want to.
datfat said:
The Dell service tag and ppid are your device identifiers for any service issues with dell since your probably rooted any warranty you may have had is void (supposedly) . The mac address is probably the main concern I'm sure. so you dont have to change the p23 at all, unless you want to.
Click to expand...
Click to collapse
Gotcha. Awesome. Well I'm gonna start changing Mac addresses on this one until it sticks and works. Once I can't get it to change Mac addresses then the issue is solved. Thanks again ffor all your help.
[Guide][Technical]Restoring your device specific data (including Service Tag)
I've covered 95% of it in my guide already, I thought I had it linked in the sticky, I'll add it some time then.

unlocking a dell streak stuff i been reading and can be easy

I have an ds7 locked to tmobile...tried two places but weren't able to provide the code and dell and tmobile suck for help ....so I started to find a way and found out ur ds7. Has the code inside a secret file ...so last week I did more research I downloaded. Root explorer. And did the show hidden files.... and to my surprise I found 2. One called ime and one imei. But the imei.jar. file I can read tried almost every jar reader. But having hard I don't really know much about coding in java ......maybe its true what I been reading. Can anyone help

(Q) Internet Sharing registry settings

Does any one know the registry settings to enable internet sharing?
There's a small collection of them, what isn't working about it on your phone? If it's something like the mobile operator permission check, then yeah, we can bypass that.
GoodDayToDie said:
There's a small collection of them, what isn't working about it on your phone? If it's something like the mobile operator permission check, then yeah, we can bypass that.
Click to expand...
Click to collapse
Really? I missed that. Is that in a thread somewhere?
I have the Samsung Ativ S Neo from Ssprint.
-Tdecision10
There are a number of threads about Internet Sharing and about registry tweaking. The requirement for tethering to be enabled on your account is checked by a mobile operator-specific DLL that is used by ICSSVC (the Internet Connection Sharing SerViCe). There's a registry value that tells the phone what DLL to load, or whether to load any. If you don't tell it to use any, it defaults to assuming you have access.
There are a number of ways to make registry changes on your phone. You can flash a custom CSC (not a full ROM, though if you look for "custom ROM" on the dev&hacking subforum, you'll find stuff about it), or you can edit the registry directly using a hijacked app chamber, or you can interop-unlock (itself requiring a registry edit, so you probably need to use the chamber hack unless you're on an old version of Samsung's firmware) and unblock RPC, then use the RPCComponent.
GoodDayToDie said:
There are a number of threads about Internet Sharing and about registry tweaking. The requirement for tethering to be enabled on your account is checked by a mobile operator-specific DLL that is used by ICSSVC (the Internet Connection Sharing SerViCe). There's a registry value that tells the phone what DLL to load, or whether to load any. If you don't tell it to use any, it defaults to assuming you have access.
There are a number of ways to make registry changes on your phone. You can flash a custom CSC (not a full ROM, though if you look for "custom ROM" on the dev&hacking subforum, you'll find stuff about it), or you can edit the registry directly using a hijacked app chamber, or you can interop-unlock (itself requiring a registry edit, so you probably need to use the chamber hack unless you're on an old version of Samsung's firmware) and unblock RPC, then use the RPCComponent.
Click to expand...
Click to collapse
http://forum.xda-developers.com/showpost.php?p=54929482&postcount=13
http://forum.xda-developers.com/showpost.php?p=54652850&postcount=575
I followed and did everything posted in these but I'm still not sure if there was a solution for s print.
"and unblock RPC, then use the RPCComponent. " I think this is the part I need to be educated on.
-tdecision10
That is one (of several) methods for editing the registry. It can write more places than the other methods, but only works on Strings and Integers (DWORDs) and is only usable on Samsung phones. It requires that your process have ID_CAP_INTEROPSERVICES, which many OEM apps (and some first-party ones, like Skype) have, but which is not normally available to sideloaded apps.
"Unblock RPC" is the term we use for telling a Samsung service that it's in test mode by placing a file named "Non-production errors.txt" in the Documents folder of the phone. This will allow using RPCComponent anywhere in the registry, instead of just in a few specific places. Search for "unblock rpc" to learn more.
RPCComponent is a Samsung-provided native (C++/CX) DLL and WINMD for accessing various privileged functions by means of a high-privilege RPC (Remote Procedure Call) server. It is not publicly available but is bundled in many of Samsung's OEM apps and is available on this forum inside most .XAP files intended for use on Samsung phones (such as my own BootstrapSamsung tool; see the interop-unlock thread). As mentioned above, you need ID_CAP_INTEROPSERVICES for it to be useful.
GoodDayToDie said:
That is one (of several) methods for editing the registry. It can write more places than the other methods, but only works on Strings and Integers (DWORDs) and is only usable on Samsung phones. It requires that your process have ID_CAP_INTEROPSERVICES, which many OEM apps (and some first-party ones, like Skype) have, but which is not normally available to sideloaded apps.
"Unblock RPC" is the term we use for telling a Samsung service that it's in test mode by placing a file named "Non-production errors.txt" in the Documents folder of the phone. This will allow using RPCComponent anywhere in the registry, instead of just in a few specific places. Search for "unblock rpc" to learn more.
RPCComponent is a Samsung-provided native (C++/CX) DLL and WINMD for accessing various privileged functions by means of a high-privilege RPC (Remote Procedure Call) server. It is not publicly available but is bundled in many of Samsung's OEM apps and is available on this forum inside most .XAP files intended for use on Samsung phones (such as my own BootstrapSamsung tool; see the interop-unlock thread). As mentioned above, you need ID_CAP_INTEROPSERVICES for it to be useful.
Click to expand...
Click to collapse
I interop-unlocked (all-capabilities) my phone using methods you've posted. This was earlier in the year sometime.
http://forum.xda-developers.com/showpost.php?p=54929482&postcount=13
I followed this closely but didn't see any finality.
I just added the Non-production errors.txt in the place noted on that relative thread.
Not sure what to do next.
Forgive me if I am being a bother.
-tdecision10
Yeah i'm completely lost. The EnableAllSideloading XAP won't deploy for me (The manifest could not be loaded and may not be valid) so I can't even full unlock, and I have no clue how to go about using the MBN creator. So if you could hold my hand, I'd love it....
okay so I figured out MBN creator (kinda) but I still need to know the proper reg settings to disable the carrier authorization check.... i.e. the setting that points to the carrier specific DLL you mentioned...
EnableAllSideloading doesn't work on WP8.1 because they changed the security on the registry key where it operates. If you can't sideload it, that's because you're not interop-unlocked at all.
MBN Creator should, in theory, not require any particular customization unless your operator requires it; the *default* state of the Internet Sharing feature is "no restrictions, enabled by default". Several people have reported that IS started working after they flashed a custom CSC even though that CSC had nothing to do with IS, just because it removed the carrier-specific customizations that were present (and were blocking IS from working) before.
@tdecision10: If you are or were able to capability-unlock, then you can just sideload any registry editor tool you want and use that. Some of them are better than others, of course. A handful of apps, like WPTelnetD (https://github.com/FurballTheGreat/WPTelnetD/releases), ship with almost no capabilities so that they can be sideloaded on any phone, but you could unpack the XAP and edit the capability list before installing if you want to. A capability that gives access to the relevant registry key is ID_CAP_RUNTIME_CONFIG.
GoodDayToDie said:
EnableAllSideloading doesn't work on WP8.1 because they changed the security on the registry key where it operates. If you can't sideload it, that's because you're not interop-unlocked at all.
MBN Creator should, in theory, not require any particular customization unless your operator requires it; the *default* state of the Internet Sharing feature is "no restrictions, enabled by default". Several people have reported that IS started working after they flashed a custom CSC even though that CSC had nothing to do with IS, just because it removed the carrier-specific customizations that were present (and were blocking IS from working) before.
@tdecision10: If you are or were able to capability-unlock, then you can just sideload any registry editor tool you want and use that. Some of them are better than others, of course. A handful of apps, like WPTelnetD (https://github.com/FurballTheGreat/WPTelnetD/releases), ship with almost no capabilities so that they can be sideloaded on any phone, but you could unpack the XAP and edit the capability list before installing if you want to. A capability that gives access to the relevant registry key is ID_CAP_RUNTIME_CONFIG.
Click to expand...
Click to collapse
Okay, I put Pasquiindustry CustomPFD on my pc unzipped it added that capability in the WPAppManifest. xml file, rezipped it but now it won't deploy.
Did I think it was too simple?
EDIT:
For Spr int, I think I need to figure out how to do this:
TetheringNAIConnection
Optional. Specifies the CDMA TetheringNAI Connection Manager cellular connection that internet sharing will use as a public connection.
If a CDMA mobile operator requires using a Tethering NAI during internet sharing, they must configure a TetheringNAI connection and then specify the connection in this node.
Specified connections will be mapped, by policy, to the internet sharing service. All attempts to enumerate Connection Manager connections for the internet sharing service will return only the mapped connections.
The mapping policy will also include the connections specified in the DedicatedConnections as well.
(This is the error I get)
If the specified connections do not exist, internet sharing will not start because it will not have any cellular connections available to share
Anyone know how to add this to the APN settings?
-tdecision10
well, i reverted to 8.0 and then updated to 8.1 via retail without thinking.... so i got the new firmware and took myself out of the game :crying:
edit: reverted back to 8.0 again and i have the old firmware again. i think using the mbn creator is key. with older versions of windows phone, the APN settings were all built into the rom. now they are provisioned OTA. everytime i change the CSC, the device fails the authorization check with sprints servers and the device doesn't provision itself. what we need is the provxml that contains all of sprints APN settings. I used to have this information in a kitchen for WM 6.5, but sadly, I deleted it a long time ago. i can currently do one thing or another, unlock internet sharing but have no data connection, or, have a data connection with internet sharing locked. i believe that i can make a custom CSC with all the necessary edits but I need to get my hands on the correct sprint provxml first. I've tried and tried to find an old kitchen for Sprint with the correct files in it, but because it's so old most of them are dead download links. I think even a stock RUU for the GOLD_C (Sprint's HTC Arrive) would do. If anyone has this or can track it down I think we'd be in business....
@GoodDayToDie thanks for all the input, it's really helpful. I think that most people have found success by simply changing their CSC because their phones are not CDMA. we've got all these extra restrictions that keep the technology from working automatically
also, i believe that if I could manage to somehow get my MSL unlock code, I could manually program the APN. problem is, CDMA Workshop can't read it, and the free version doesn't let you use the brute force option to find it. Sprint changed their policy in October to under no circumstances giving out the MSL code unless your contract is up. I'm going to continue to keep trying different tech support reps to see if I can get one of them to give it up.
@tdecision10 I'm getting close, but I REALLY need those WM 6.5/7 Sprint OEM packages..... if you know of anyone or come across it browsing it would be immensely helpful!
mtstmp, I have leadpoizon's old rom for HTC Arrive. Let me know if that will work and if so, how to get it to you.
-tdecision10

Categories

Resources