[Touch Diamond, MDA Compact IV ROM Development] rmarshll:
it is suppose to freeze, the only reason you use the Scan tab is to find the readable areas of the RAM in your Particular Phone. C000 is just where it ends and thats why it freezes.

Memory map gotten by using "Scan" function on "Memory" tab:

-----

Scanning memory for readable areas:

Unreadable area from: 0000:0000

Readable area from: 0136:0000

Unreadable area from: 01BD:0000

Readable area from: 17B8:0000

Unreadable area from: 17BB:0000

Readable area from: 17C1:0000

Unreadable area from: 17E2:0000

Readable area from: C000:0000

Process is stopped at: C0D0:0000

now look at your readable locations

in the above example the RAM is readable from

1) Start = 0136:0000, End = 01BD:0000

then

2) Start = 17B9:0000, End = 17BB:0000

then

3) Start = 17C1:0000, End = 17E2:0000

then you have to scan to a file from the MEID Section and create 3 files. the first file you scan from Start = 0136:0000 to 01BD:0000

once it finds pESN and MEID in that first scan it will ask you to save the locations to a file ( which you will Create )

then you do the exact same thing for the 2nd and 3rd scan locations..

once you finish the scans you will have 3 files.. they will look like this.

Example: Scan 1

MEID (pESN) addresses:

014A:6477 - MEID

018E:9134 - MEID

018E:8C3C - pESN

018E:94B8 - pESN

0196:A5D2 - pESN

01A0:8800 - MEID

01B4:912C - MEID

01B5:AF75 - MEID

01B7:D339 - MEID

01B7:F1E5 - pESN

Example: Scan 2

MEID (pESN) addresses:

17B8:E8F4 - MEID

17B9:0F1F - pESN

17B9:42E8 - pESN

17B9:8634 - pESN

Example: Scan 3

MEID (pESN) addresses:

17C9:FD0C - MEID

17E0:23AD - MEID

Now after you have the information from all 3 scans you Create another TXT file and insert the Information into that file.

Example of all information in 1 file

MEID (pESN) addresses:

014A:6477 - MEID

018E:9134 - MEID

018E:8C3C - pESN

018E:94B8 - pESN

0196:A5D2 - pESN

01A0:8800 - MEID

01B4:912C - MEID

01B5:AF75 - MEID

01B7:D339 - MEID

01B7:F1E5 - pESN

17B8:E8F4 - MEID

17B9:0F1F - pESN

17B9:42E8 - pESN

17B9:8634 - pESN

17C9:FD0C - MEID

17E0:23AD - MEID

now that you have that file created. you do as I have said above in previous posts

you need to push connect under the comm port settings to your phones comm port then go straight to the Security Tab and change the MEID Section to Universal RAM Method..

type your ESN in the ESN Box and dont change anything else.. and type all 00000's in the MEID Box and uncheck the Box below to disable MEID and dont touch anything else..

Click Write in the MEID Section and load from your scanned locations file which you created from your 3 Memory Read's

once CDMA workshop says writting successful.. immediately Pull the USB cable and the battery out of the Phone.. (personally I like to have the back cover off the phone already so that its Easily accessible.)

DO NOT TOUCH OK or anything else in CDMA Workshop until the phone is rebooted.

im not gonna explain this again.. its not that hard.. I hate to be a jerk.. but if you just follow the instruction step by step in the help file then it will work.. im seriously getting frustrated.

here are the instructions from the help file..

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

«Universal RAM» method

This method is based on Peek/Poke high-level commands and used for CDMA models for which MEID cannot be changed by the other methods, for example: HTC models, BlackBerry models and many others.

At first, you need to use second option - «Scan memory for MEID addresses and save to a file» in order to find all MEID (pESN) addresses in RAM memory. When process is done, save MEID (pESN) addresses to a file and use the first option - «Load MEID addresses from a file and change MEID» in order to change MEID. If you already have a necessary "MEID (pESN) addresses" file, then you can use the first option only.

To find Start/End addresses of RAM, use «Scan Memory» function ("Memory" tab).

Notice, MEID (pESN) addresses in RAM memory may be different for different firmware revisions for specific model. So you need doing scanning for each firmware revision and must not use "MEID (pESN) addresses" file from other firmware revisions.

*) How to disable MEID in order to use ESN only? - uncheck MEID status checkbox, enter correct ESN value in "ESN" section and press "Write" button in "MEID" section.

*) Once MEID is disabled and you want to change ESN again, then use "Universal RAM" method in "MEID" section as written above, do not use "Universal RAM" method in "ESN" section.

*) Once changes are done with "Universal RAM" method, then do not press any buttons in CDMA Workshop, you need to do a manually restart the phone instead, in order to correctly apply changes.

Note, that MEID (pESN) addresses may be located in different readable areas, example for HTC-6950 (Diamond):

Memory map gotten by using "Scan" function on "Memory" tab:

-----

Scanning memory for readable areas:

Unreadable area from: 0000:0000

Readable area from: 0136:0000

Unreadable area from: 01BD:0000

Readable area from: 17B8:0000

Unreadable area from: 17BB:0000

Readable area from: 17C1:0000

Unreadable area from: 17E2:0000

Readable area from: C000:0000

Process is stopped at: C0D0:0000

-----

MEID (pESN) addresses are located in three different readable areas with Start/End addresses:

1) Start = 0136:0000, End = 01BD:0000

2) Start = 17B8:0000, End = 17BB:0000

3) Start = 17C1:0000, End = 17E2:0000

So, you need to scan all three areas (second option), then place found MEID (pESN) addresses in one file manually, then use that file in first option.

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

If you dont do everything exactly the way it says and in the correct order.. then it will NOT work and you would then have to start the whole write process over..

the key is to have all your pESN and MEID locations in one file..

If you dont have all the pESN and MEID locations then it will not work!

the example in the CDMA Workshop is for a Diamond.. so your Readable locations will be similar but i assure you they will be different.. so make sure that you look very closely at the start and End addresses..