PDA

View Full Version : Flash Blackberry 8830 Verizon World Edition to Metro PCS



ljay67
07-23-2010, 08:11 PM
I don't care for BBM and stuff like that, I just want Web, calls, and MMS for Metro. I have QPST, a metro pcs prl, drivers, COM port number, Blackberry desktop manager, just need instructions. I started, but had to start over because I messed up at some point (idk) so if someone would give me a step by step guide as to how to flash this blackberry to MetroPCS that would be great :D

Pac3comm1
07-25-2010, 11:44 PM
Ljay,
I could write one for you, but that would take me forever. So instead I found one on MO-FI posted by hitesh, but originally written by swordsaint. So here you go!
This is a tutorial for the 8330 curve, but the same principals apply.
Originally posted by swordsaint_ss on old mo-fi.com
I am not changing a single word from old post so read it as it was written by original poster.

ESN Writeup!

UniCDMA 0.98
Winhex Pro
QPST
QXDM

For Blackberry 8330

I advise you have Blackberry Desktop Manager Open first, before you attempt to open, configure and and connect any program that will use the phone.

1 Use UniCDMA - Change the COM PORT it looks for the phone on to the same one Blackberry desktop manager uses in Windows Device Manager

Start Address : 0x10700000
Length : 13500000

You will get a memory read error close to the end, don't worry about that, as the dump up to that point is sufficient to get the ESN addresses.

2. Use WinHex Pro and open the generated bin file from UNICDMA.

Go to Search --> Hex values

Search for the ESN Value in reverse e.g if your ESN is 12 34 56 78 , search for 78 56 34 12.
Write down the address offset that the ESN value is found at, Keep pressing F3 and writing down the Memory Address values until WINHEX prompts that the value cannot be found. You should have found between 11- 14 memory addresses. I found 14.


Be very careful with this part as it is ESSENTIAL to moving on to the other steps of the process.

Using Start Address 0x10700000 Add each ESN Memory Address to get the ACTUAL Address you will search for in QXDM.

Recall you are using HEXADECIMAL Addtion so

0-1-2-3-4-5-6-7-8-9-A-B-C-D-E-F, example: 5+C=17, after 9 goes A=10. B=11, C=12, D=13, E=14, F=15

e.g

0x10700000 +
000148A0 =
0x107148A0

0x10700000 +
0x003A7070 =
0x10AA7070

etc etc.

Install QPST First, then install QXDM.

I advise you have Blackberry Desktop Manager Open first, before you attempt to open, configure and and connect QPST.

Open QPST after INstall and go to ADD PORT if the RIM Virtual serial Port # is not already listed. Add the port # if its not there and then connect the phone.

Once you see that the phone is detected, you can proceed to open QXDM as it depends on QPST being connected to the phone in order to connect and perform any functions on the device.

Go to Communications --> Port.

Choose the Port that the Phone is connected to from Device manager and QPST. Click Connect and you should now see little reading changing in the lower right hand corner of the screen showing that the phone has been detected by QXDM.

In View --> New --> Common, Choose Command Output.
1. input mode offline-d
2. spc "000000" (this is of course specific to verizon, it differs on other networks, consult tnycortes; thread to find this value out)
3. It should read, Result SPC Correct.
4. Hit F4 and Memory Viewer should open.
5. Start with the first ACTUAL address you calculated using the combination of start address and memory address.Input it into the field and press ENTER
6. Verifiy that the location does indeed contain the ESN # in reverse. If the values are all 0 or greyed out you are not at the correct address.
7. Click on the first digit and enter eight (8) consecutive 0's i.e 00000000 . you will see these values turn red. Click WRITE.
8. Repeat steps 5-7 for all the memory addresses.

In View --> New --> Common, Choose NV Browser
1. Under category choose Security. ESN is the first item in the list.
2. Hit read, the ESN should come up as 0x00000000. if it does not, you have not written to all the ESN locations. Click on this ESN field and enter new ESN
3. Click Write. it should say successful. if it does not, then you have not found and rewritten all the ESN Locations in the phone's memory.
4. To confirm go to the command line again and enter RequestNVItemRead esn
5. It should confirm that you have the new esn. If you see two differing ESN's as in DIAG TX 0x00000000
and DIAG RX 0xYOURESN then you have not found and rewritten ALL the ESN locations on the phone.
6. Final step, enter mode reset
7. when the phone reboots confirm via Options --> Status that it is confirmed in the phone's screen. SUCCESS!


NOW i was very happy to have this process done in three days or so since i first started researching it. I could not have done it without lots of help along the way from some vry patient and willing forum members such as tonycortes, miguelito( amended his post) , magicwonder(told me there were more esn locations to be found) and ravjeet( for suggesting the longer byte length for the Unicdma dump)

THANK You ALL!

Now if someone can be so kind as to help me with the A-key issue as i was able to activate the phone with verizon but it is unable to send or receive text messages and calls because Verizon is "unable to authenticate my device'

THANKS AGAIN and i hope you find my post useful. Please say thanks if you do..

chavez
08-04-2010, 02:29 AM
will this work on a bb storm 9530 and where can i find these tools? i have most of them and can not find a good tool box or list of tools needed. any help? thnkx

whitey10tc
08-04-2010, 02:53 AM
will this work on a bb storm 9530 and where can i find these tools? i have most of them and can not find a good tool box or list of tools needed. any help? thnkxIt's all there in post #2. and then from there everything else can be found here on Gurus.

chavez
08-04-2010, 05:47 AM
ok thnks and im looking for metro pcs prl. im new to flashing but hope to be one of the best. so heres my problem i need to flash a bb storm 9530 to metro and i was hoping for a good tool box and maybe sumone willing to help. thank you

whitey10tc
08-04-2010, 10:01 AM
All the info you need is right here in the forums, as for a "Tool box" it will be up to you to download the necessary PST tools. There is nothing already prepackaged. For Metro PRL's look in the Metro PRL threads.

chavez
08-05-2010, 06:50 PM
ok so i think the start address and lenght is diffrent for blackberry 9530 but im not sure where or how to find the one for my phone. any help?

Pac3comm1
08-05-2010, 06:54 PM
Bro If you read the title of this post, it say Blackberry 8830 World Edition. Im pretty sure that this tool will not be able to help you with the 9530. Most likely, you will have to use CDMA Workshop.

chavez
08-05-2010, 06:59 PM
ya i got that. thats why i was looking for the bb 9530 address. hav you done this before? and is there any free version of cdma workshop?

Pac3comm1
08-06-2010, 12:37 AM
There Is no free version of this CDMA WS that will get the job done. Your best bet is to buy the full version.

whitey10tc
08-06-2010, 12:50 AM
Bro If you read the title of this post, it say Blackberry 8830 World Edition. Im pretty sure that this tool will not be able to help you with the 9530. Most likely, you will have to use CDMA Workshop.


ya i got that. thats why i was looking for the bb 9530 address. hav you done this before? and is there any free version of cdma workshop?


There Is no free version of this CDMA WS that will get the job done. Your best bet is to buy the full version.
Man I'm slipping I didn't even notice the model #.
chavez, to do what you need to do, you will need the full version of CDMA WS 3.5 the cracked version 2.7 is to out of date for a storm.
So weigh your options of doing yourself or paying someone in your area.

aymex7566
09-17-2010, 05:18 PM
there is NOWAY you can do this by yourself, because meid has to be added to Metro PCS data base. only way you can add is to flash by a participating Metro PCS store. One more thing is that HoudiniSoft ( flashing software ) does not support Blackberry. So that means you have to clone your Blackberry's meid, and that is a FEDERAL crime. Do you guys really want to flash your Blackberry?

unashamed
09-22-2010, 03:47 PM
Im an avid windows mobile GSM flasher, this will be my first Attempt at a cdma Flash on a blackberry.
Basically im reading that flashing the verizon blackberry to metro pcs is not possible by a home user?

Dex
09-22-2010, 03:57 PM
Im an avid windows mobile GSM flasher, this will be my first Attempt at a cdma Flash on a blackberry.
Basically im reading that flashing the verizon blackberry to metro pcs is not possible by a home user?
Well i can say this u can get the fone on the network of metropcs as a home user or end consumer but the problem is getting the meid/esn into metros database so that it can be used i would suggest lookin at the sticky on HF which has a list of dealers that can do that for a fee

ljay67
09-22-2010, 04:07 PM
8330 from sprint would be pretty much the same ryt?

unashamed
09-22-2010, 04:15 PM
im attempting an 8830 verizon world edition.

ljay67
09-22-2010, 04:17 PM
I tried one, I got basic talk and text the web and mms will hurt ur head. I found a solution on HoFo tho

unashamed
09-22-2010, 04:24 PM
did you try and succeed with page 1 of this post on the 8830?

endlessdreams
10-13-2010, 04:19 PM
i was able to use the post to flash my 8330 but have an issue my internet worked and mms and for somereason last few days i cannot get online or mms ? any ideas?

McNugget
10-22-2010, 07:10 PM
i was able to use the post to flash my 8330 but have an issue my internet worked and mms and for somereason last few days i cannot get online or mms ? any ideas?

Look here ([Only registered and activated users can see links])