HTC Droid Eris Programming

[parin]

U will need the following below softwares for the programming of Droid Eris

QXDM
[Only registered and activated users can see links. ]
[Only registered and activated users can see links. ]


UNICDMA
[Only registered and activated users can see links. ]
[Only registered and activated users can see links. ]
[Only registered and activated users can see links. ]

WinHex
[Only registered and activated users can see links. ]

QPST
[Only registered and activated users can see links. ]

HTC Eris Diagnostic Driver
[Only registered and activated users can see links. ]

CW2.7
[Only registered and activated users can see links. ]



Connect the phone to Computer & Dial ##3424#
phone will go to Diagnostic Mode & it will ask to install the diagnostic Drivers
Manually install the drivers from the location where u have downloaded the drivers

U need to keep the phone in Diagnostic Mode for Programming

Now Open QPST & Check the port on which the phone is lying
I phone is now showing try to Add port


Open CDMA Work Shop 2.7 Cracked
Select the port on which phone is connected
Connect the phone
Press Read
Now go to security tab
Send the spc 000000
press read button in ESN
than Select Universal Ram Method from Drop down menu
Press the write button
It will ask for 2 option
Select 2nd one Scan for ESN Adress
Enter the below location, 1 after 1
0142-1060
1075-109c
10d4-10d5
While Scanning u will get all the pEsn Locations
Just Note down all addresses in a paper properly without mistake

Now open UNI CDMA
Go to Setup
Select the port on which phone is lying
once connected go to
Memory Tab
first Scan
0x00000000 to 0xFFFFFFFF
lenth bytes 8192
u will get the readable areas
while scanning the phone will restart
after restart cancel the scan

now scan all the readable areas 1 by 1
in unicdma memory tab
in Read memory
Give starting Address as ur 1st readable area eg: 0x103A000
lenth as 999999999
Also scan from 0x01042000 to 999999999 to get more MEID locations
Save the file for all scanning areas

My Readable & Unreadable areas are as follows
READABLE area at 0x0103A000
Unreadable area at 0x0161A000
READABLE area at 0x1075C000
Unreadable area at 0x1078E000
READABLE area at 0x1082A000
Unreadable area at 0x10D52000
READABLE area at 0xC0000000
Unreadable area at 0xC0D00000

After u r done with scanning
Open files one by one in winhex
Search for HEX Values
To search Put ur phones MEID in Reverse Ex: if ur MEID is AB CD EF GH IJ KL MN, u should seach for MNKLIJGHEFCDAB
u will get the locations 1 by 1
note down locations in paper separately for each scan1

Now u need to calulate the location for QXDM
Suppose in 2nd scan u got 2 locations where starting Address was 0x1075C000
Example: 10D98 & 17988
U need to Add this location with starting Address to get the QXDM Location
for this u need hex calculator
10D98 + 1075C000 = 1076cd98 <== This is the location in QXDM were MEID is located
17988 + 1075C000 = 10773988 <== This is the location in QXDM were MEID is located

By above calculation u will get all MEID Locations in QXDM

Now After u have All
MEID & pEsn Location
u can proceed to QXDM

Open QXDM
Go to COmmunication, Select the port
Now in Command Line Type
mode offline-d
than
spc "000000"

Now press F4
memeory viwer will open

1st start putting the address u got for MEID
Exapmple 0x1076cd98 & press Enter
now u will get ur MEID 14digit in reverse
make it zero & press write

After u have made MEID zero

proceed in same manner for ESN location
& make it zero

Now after MEID & ESN has been made zero
u can confirm it by putting the command
requestnvitemread esn (for esn)
requestnvitemread meid (for meid)

after u get a message that it's zero than u can proceed to write ur ESN or MEID which ever u want

Commands are
requestnvitemwrite scm 0x2a

requestnvitemwrite esn 0xUR ESN
esn= actual 8 digit esn (not in reverse)

if u are writing MEID no need to write the esn
requestnvitemwrite meid 0xUR MEID
MEID = actual 14 digit meid (not in reverse)

Restart ur phone, hope ur ESN would have changed

Now upload the PRL file of desired operator

For Me MEID Locations were as below on 2.1 official ROM
0X1076CD98
0X10773988
0X10778118
0X109AD3B4
0X1083AD98
0X10841988
0X10846118
0X0142AE3C
0X0142AE48
0X015CF466


On Stock 1.5 My MEID locations were
MEID

0x01421A1C
0x01421A28
0x015B38A6
0x015B38DC
0x1076A798
0x10771388
0x10775B10
0x108BFAEC
0x109AAC2C

0x1076B388
0x1076FB10

U can try above MEID Locations if u dont want to scan

Good Luck
Enjoy

Credits to Hitesh, Gaurav & Tushar for guiding me through the whole process

[whitey10tc]

Please read the sticky in this forum and all forums before posting. Thread closed.

[mramike]

I can't figure out how to install the diagnostic driver. Can you help me? I am pretty new at this.

[xxSLRxx]

I can't figure out how to install the diagnostic driver. Can you help me? I am pretty new at this.

What operating system are you using?

[mramike]

just need to figure out how to switch my sprint lg rumor touch MEID code over to my (non active) verizon HTC eris. everything else is done (prl, and phone number) just need to figure how to get this to work out right. i got most of the codes off, all esn codes are off just need to figure out how to program the MEID in.

[whitey10tc]

just need to figure out how to switch my sprint lg rumor touch MEID code over to my (non active) verizon HTC eris. everything else is done (prl, and phone number) just need to figure how to get this to work out right. i got most of the codes off, all esn codes are off just need to figure out how to program the MEID in.

Discussions of cloning an ESN/MEID from one device to another are against the forum rules and also illegal in the USA! For violating the forum rules members receive a 24 hr ban on the first offense. There are no exceptions to this rule and it is here for the protection of the forum and it's members.