yashsingh1/xdaforums huggingface dataset:
[EVO 4G Q&A, Help & Troubleshooting] AaronASB:
Solved my problem. Thanks guys.
[EVO 4G Q&A, Help & Troubleshooting] AaronASB:
Solved......
[EVO 4G Q&A, Help & Troubleshooting] nutrapi:
Could someone help a guy out with how to actually perform the scan? I legitimately own cw 3.6 and every time I do a security scan - either esn or meid my phone reboots.
[EVO 4G Q&A, Help & Troubleshooting] suremail:
You need to use the memory tab to get the valid ranges for the scan, and then instead of using the defaults in the ESN scan you put in the different ranges.

For the EVO it is

00FA:0000 to 00FE:FFFF

0108:0000 to 01D8:FFFF

(at least on my EVO)
[EVO 4G Q&A, Help & Troubleshooting] beastybob:
As pathetic as this sounds, can someone please help direct me to scanning the esn addresses of my htc evo 2.15.00.11.19 radio?

So far, this is how I did it:

I opened up cdmaws 3.6, and clicked on security tab, and then sent the spc for the evo which unlocked it. In that same tab, I see 4 boxes (ESN, MEID, PASSWORD 16 DIGIT, SPC/USER LOCK).

This is where I'm lost. Basically, do I click on the esn tab and click read or write? Niether does anything. So I click on the Universal RAM option and click write again. This time it asks for starting and ending addresses. But I don't know those.

Any ideas? please help. Thanks
[EVO 4G Q&A, Help & Troubleshooting] mrkevo3000:
Maybe instead of saying problems solved you can explain what process you applied to solve it and what the problem was to begin with, that way when noobs and others come start asking questions the answers are in plain sight!
[EVO 4G Q&A, Help & Troubleshooting] jraz305:
gingerbread 2.3 meid locations changed

I'm in the same boat my self . Except since I updated to gb 2.3 all the Meid locations have changed I have been able to do the inital scan for the readble ares but after that I don't know how and where to start the rest of the search can some one help and be specific on where to locate the new Meid that comes with the gb 2.3.3, radio 2.15.0012 I belive it is

Thanks jraz
[EVO 4G Q&A, Help & Troubleshooting] z3r01:
My MEID os all zeros but my esn is still there...i got 14 locations and still...
[EVO 4G Q&A, Help & Troubleshooting] bond17_007:
Can you please post the locations.. I followed the post and I did not find my imei or esn in the location posted.

I am running on

Baseband version: 2.15.00.11.19

PRL: 60680

Android 2.2
[EVO 4G Q&A, Help & Troubleshooting] anki_junk:
Can I swap my HW? [MEID/ESN Repair: What are my options?]

I have 2 EVO 4G phones. I rooted the older one a year ago and upgraded a couple of times with Fresh. It's currently at 2.2

Baseband

2.15.00.11.19

Kernal

2.6.32.17-gee557fd

htc-kernal@and18-2 #15

Software

3.70.651.1

I lost it and just bought a brand new one with a new number. My plan was to try to use my nandroid backups to restore everything but I can't root the new phone which shipped with 2.3.3 :( Not yet anyway.

Then yesterday I get it back and I'm thinking that maybe I could put my working number into my old phone. I have the MSL code and everything the way I want it on that phone but it has no connectivity and I have to carry both!

Has anyone written up the proceedure to transfer my new MEID/ESN, etc. to my old phone or is my only option to just wait for an exploit and root the new one like I planned in the first place?

I don't want to break any laws (especially Federal ones) but I paid over $500 for the new phone, (I didn't qualify for a subsidized rate) I'm honoring my contract with Sprint, and this shouldn't be illegal.

Please help.

PS: I know how to use a hex editor and I'm probably a little above the entry-level noob. Thx
[EVO 4G Q&A, Help & Troubleshooting] redyns:
Well, it's not illegal. It is just a misconceived notion. Read the Telecommunication at of 1998. It states that is is illegal to change an esn or meid for fraudulent purposes. But, this is besides the point. All you have to is change the phone that is associated to the account with sprint.
[EVO 4G Q&A, Help & Troubleshooting] anki_junk:
Workaround while waiting for root

I thought of that but didn't want to let them play around with my rooted phone. It's not a one-time thing either... I'd like to be able to switch back when I get the new one rooted. It's clean and shiny. Again, I didn't want anyone at sprint playing with anything.

Are you saying that there's some reason I couldn't use my nandroid backups to restore/clone my old phone onto the new one when it's rooted?

I never thought that this would solve the MEID/ESN issue but I could have my exact config -right? What if any effect would this have on the MEID/ESN data?

Where can I find instructions to swap my MEID's and ESN's?
[EVO 4G Q&A, Help & Troubleshooting] untruestory:
Downgrade your radio and it's a piece of cake. You don't have to find the locations. All you do is run a script and the meid will be writable. I did a write-up on it months ago "how i flashed my evo off boost and fixed the MEID" Look it up.

As for the legalities: It is NOT illegal to restore the MEID to it's original number. It is only illegal to change the MEID to one that belongs to another phone. Then again so is downloading movies.
[EVO 4G Q&A, Help & Troubleshooting] cleyward:
esn repair

Where can I find the script?

It is possible to rapair the meid on the evo 3d?

Thank you
[EVO 4G Q&A, Help & Troubleshooting] redyns:
nope if u own both phonesu can use either esn. so go for it.
[EVO 4G Q&A, Help & Troubleshooting] fatjoe216:
Hello all as i am a nubee. I have managed to zero out my esn and meid but i cannot downgrade my radio to make the phone writable. Has anyone ran into this problem? My HW Ver is 3. Radio is 2.15.00.11.19, software is 3.29.651.5. I tried to downgrade via clockwork write zip from card.

Please help. Anything is appreciated.
[EVO 4G Q&A, Help & Troubleshooting] fatjoe216:
Anyone? Please?
[EVO 4G Q&A, Help & Troubleshooting] ak074:
what radio are you trying to flash? you might also try amon ra 2.3 instead of clockwork.
[EVO 4G Q&A, Help & Troubleshooting] louforgiveno:
name the file PC36IMG and put on root of sdcard then boot (vol dwn +pwr) let it scan and find the file and accept update.
[EVO 4G Q&A, Help & Troubleshooting] untruestory:
If you zero'd out your meid then it is writable. The purpose of downgrading your radio is so you can make your meid writable WITHOUT having to zero out your meid.

If that's not what you're talking about please explain.
[EVO 4G Q&A, Help & Troubleshooting] Moritzio:
@ untruestory:

The CDMAGurus site is down. Is there an alternate source for that piece of your step-by-step?
[EVO 4G Q&A, Help & Troubleshooting] untruestory:
1) install htc diag drivers

2) Put your evo in diagnostic more ##DIAG#

3) plug in your evo

4) open qmat and select "hardware forensics"

5) select appropriate com port

6) click run script and select the one appropriate for your radio

Your meid is now writeable
[EVO 4G Q&A, Help & Troubleshooting] Moritzio:
Thanks for those steps. I found QMAT and ran it. However, I don't have a script for my radio. Where may I find a script for an HTC EVO radio 2.15.00.0808?
[EVO 4G Q&A, Help & Troubleshooting] Moritzio:
Nevermind. I think the best way is to downgrade the OS and radio to one where the info is already known and use that, then upgrade the OS and radio afterward.
[EVO 4G Q&A, Help & Troubleshooting] hazehansen:
Beyond Belief

I spent days trying to zero out esn and meids. I started not to believe it. I started to research Qmat possibilities. The scientific process beckoned me to try one last thing. It worked. I was able to write to the evo that which was previously unwriteable.

How I did it.

1. Prep to scan with CDMAWS-memory tab.

2. Do First scan starting with address 00fa:0000, (make note of .bin file directory and name)

3. Do Second scan starting with address 0108:0000 (or 0109:0000 if your radio has an unreadable sector that encompasses 0108:0000)(make note of .bin file directory and name).

4. Use WinHex, open first CDMAWS .bin file 1.

5. Goto "Search" menu, choose "Find Hex Values". Search for your ESN (Flipped). List hits up to 40 just to be safe. Click "OK" and the search will begin. 6. Make a list of the Offset Values that come up in the search. Label the list ESN Offsets

7. In the same way, Search for MEID (Flipped), and make a list of Offsets called MEID Offsets.

8. Repeat steps 4 - 7 except with the other .bin file (from the 0108:0000 scan)

Up til now you have 2 scans and four lists (2 ESN, and 2 MEID offset lists)

9. Use the Hex Calculator on this website (csgnetwork_com/hexaddsubcalc_html) to add the offsets to the scan start address. In other words type in 00fa0000 as one value, and type the offset in as the other value. Click the "Calculate" Button, and get the answer from the "Calculated Hex Addition" output window. Start building a new list of ESN addresses and one of Meid Addresses.

10. Use QXDM, connect phone, use F4 hotkey to open viewer. In address field, after the 0x, Type in address, and hit enter. Find ESN and replace with zeros (ESN will be flipped ofcourse). Click the "Write" button, and goto the next address

11. When you get to the bottom of the ESN address list go visit all the addresses again to make sure that you didn't forget to zero something.

12. In the QXDM Command window type "requestnvitemread esn" and hit enter. You should see zeros, if not visit your addresses again and zero them. This is how you flush out the last hidden location if it exists (my ESNs where not stubborn, my MEIDs were though). Type "requestnvitemread esn" and hit enter. if your ESN still does NOT appear as 0x0000000000, then you know that you have ghost esn that hides and pops up after the read. You must find this location, because your ESNs will not be zeroed until you first zero the open locations and while they are still zeroed you find the ghost that pops up. Once you know where the ghost pops up then you just have to catch it before it fathers another iteration of the ESN. Once the Ghost is dead you will get your 0x0000000000 after "requestnvitemread esn".

13. The same applies for MEIDs. It all comes down to that ghost. It pops in and out.

I got lucky and saw when it popped up and I was there to zero it out. That is how I killed my last MEID. "requestnvitemwrite meid" should work after "requestnvitemread esn" and "requestnvitemread meid" both show zeros.

I wasnt too sure if zeroing would work, but it did.
[EVO 4G Q&A, Help & Troubleshooting] untruestory:
Nice write up! I found a couple other similar solutions when I was figuring it out. I like shortcuts and the qmat solution is a download and a few clicks to a writable meid :)
[EVO 4G Q&A, Help & Troubleshooting] hazehansen:
Yeah, read where you said that. However, the script was the missing detail. Never used Qmat before.

Didn't know where to get... (?)

or how to use "the script",... (?)

or why the script restores write-ability. (?)

Please tell me the answers, and I will broaden my horizons, and I will definitely become a fan of Qmat. :)
[EVO 4G Q&A, Help & Troubleshooting] tho34:
meid/esn

I have all my meid / esn stuff done my qustion is it nessary to

be on a stock rom in order to get your phone to ota on boost

i get a messag saying can not authenticate please contact your

andmin what does that mean
[EVO 4G Q&A, Help & Troubleshooting] untruestory:
The script is floating around the internet. Your knowledge is beyond mine. I originally found the solution on either hofo or mobilefiles... I can't recall.

To run the script select hardware forensic and click the run script button.

I don't know how it works but here it is:

<QMAT>

<script name="Run Test Pure">

<cmd delay="50">290100</cmd>

<cmd delay="50">41746477616F70</cmd>

<cmd delay="50">050000A4010410B500F0</cmd>

<cmd delay="50">050400A4010407F80E48</cmd>

<cmd delay="50">050800A40104022100F0</cmd>

<cmd delay="50">050C00A4010401F810BD</cmd>

<cmd delay="50">051000A401040C4C2047</cmd>

<cmd delay="50">051400A40104FFB50C49</cmd>

<cmd delay="50">051800A40104E0200870</cmd>

<cmd delay="50">051C00A401040B490870</cmd>

<cmd delay="50">052000A401040B490870</cmd>

<cmd delay="50">052400A4010400200B49</cmd>

<cmd delay="50">052800A4010408800B49</cmd>

<cmd delay="50">052C00A4010408800B49</cmd>

<cmd delay="50">053000A4010408800B48</cmd>

<cmd delay="50">053400A401040B490860</cmd>

<cmd delay="50">053800A401040B490C48</cmd>

<cmd delay="50">053C00A401040860FFBD</cmd>

<cmd delay="50">054000A4010488135601</cmd>

<cmd delay="50">054400A40104EF2D5400</cmd>

<cmd delay="50">054800A40104C3C96C00</cmd>

<cmd delay="50">054C00A401045BD06C00</cmd>

<cmd delay="50">055000A4010443036D00</cmd>

<cmd delay="50">055400A4010454D06C00</cmd>

<cmd delay="50">055800A401041E036D00</cmd>

<cmd delay="50">055C00A4010470036D00</cmd>

<cmd delay="50">056000A4010401200000</cmd>

<cmd delay="50">056400A4010480036D00</cmd>

<cmd delay="50">056800A40104601B1801</cmd>

<cmd delay="50">056C00A40104934E5200</cmd>

<cmd delay="50">07601B1801020100A40100000000</cmd>

<cmd delay="50">290100</cmd>

<cmd delay="50">49</cmd>

</script>

</QMAT>
[EVO 4G Q&A, Help & Troubleshooting] untruestory:
That's more of a flashing question than meid repair... Also I don't know what you mean by OTA? If you're talking about updates, you'll have to do that manually. If I remember right boost is simple just get your meid on their system and set your mdn and msid and you're good. You have to set your apn to get mms working. There's threads on all of this.
[EVO 4G Q&A, Help & Troubleshooting] hazehansen:
I used an older handset. Went to "update handset" on the carrier's website. activated the old phone. Waited 20 minutes or more. Then activated the desired phone in the same way. It did the activation by itself. here's 3 vids I used in addition to the "old handset temporary" method.

(www*youtube*com/watch?v=xNLMw9xLR28)

(www*youtube*com/watch?v=YKNij__qnL4)

(www*youtube*com/watch?v=QoXXoOION-M)
[EVO 4G Q&A, Help & Troubleshooting] hazehansen:
OTA -

O

ver

T

he

A

ir? OR

O

ne

T

ime

A

ctivation? Either way this is when the system mates up with your phone based on an akey code (aka CAVE).
[EVO 4G Q&A, Help & Troubleshooting] jcthelight:
Hi! If I use this to repair an esn and activate it on sprint is the web and mms gonna work? Will the prl and profiles update automatically or do I need to write them using qspt? Thanks.
[EVO 4G Q&A, Help & Troubleshooting] untruestory:
If the last service it was used on was Sprint then yes.
[EVO 4G Q&A, Help & Troubleshooting] jcthelight:
Thanks! Hope it works out well for me.
[EVO 4G Q&A, Help & Troubleshooting] budgreen24:
EVO meid repair script, work on a Hero?

Does anyone know if this method and the script will work on an HTC Hero cdma (sprint)?
[EVO 4G Q&A, Help & Troubleshooting] untruestory:
The method, yes. The script, no. Instead of using qmat to make your meid writable use a different method. Everything else is the same.
[EVO 4G Q&A, Help & Troubleshooting] spooky187:
Have any of you heard of any issues when repairing the esn/meid on a HTC SHIFT EVO to boost.... with this problem code? Sms Error 64 Class 2

Can anyone tell me why i get that error ?
[EVO 4G Q&A, Help & Troubleshooting] tieman123:
To correct the MEID just download DFS CDMA Tool from CDMATools.com. It's a demo but does allow ESN/MEID udpates.
[EVO 4G Q&A, Help & Troubleshooting] spinsat74:
MEID alocations issue

So I have an EVO that is rooted...need to find MEID to repair. I already zeroed out the ESN, but MEID is still coming up. Ive tried scanning and like you guys advised, but MEID is being stubborn.

Android Version

2.3.3

Baseband

2.15.00.0808

Kernel

2.6.35.10-g13578ee

htc-kernel@and18-2#1

Wed Jul 20 18:06:16 CST 2011

Build Nuber

4.53.651.1 CL133994 release-keys

Software Number

4.53.651.1

PRI Version

2.15_003

PRL Version

60681
[EVO 4G Q&A, Help & Troubleshooting] ezfilez:
EVO 3D

2.3.4 H.Boot 1.5

Sense 3.0 208.651.2

Radio - 0.97.10.0808

Hello My fellow Flashers

Does anyone know the mem location for this radio? can i downgrade

Can i use a EVO 4G Radio on the EVO 3D?

Can I flash a evo rom with and older radio to to the EVO 3D?

I know the Evo 4Gs in and out but i cant find any info on this 3D.

Please any help would be great please PM me.

I have some qmat scripts for evo 4g radio 1.39.00.05.31 and 2.05.00.06.10

You can fix your M__D in 5 sec. Give me a PM
[EVO 4G Q&A, Help & Troubleshooting] Klown80:
Check your PM
[EVO 4G Q&A, Help & Troubleshooting] LeslieAnn:
If it has any floating esn, even if they know the locations you will still have to scan for the floaters.
[EVO 4G Q&A, Help & Troubleshooting] spooky187:
I wouldn't mix the evo 3d with the evo 4g stuff...i've heard that would brick your phone.
[EVO 4G Q&A, Help & Troubleshooting] cs0421:
I've been looking everywhere for this last few tricks since I just can't get it to work.. i have a HTC evo 3D that im trying to flash to metro pcs what I've done so far is just load a prl and NAM profiles but Im stuck in the next steps to be specific I don't how to do what you guys called a MEID REPAIR if someone can please guide to the right direction It'll be highly appreciated.. since I'm just desperate to get this on

oh btw.. I have CDMA Worshop 3.8.0 I bought it yest to play with it because I've heard its easier but for somehow I just can't do it.
[EVO 4G Q&A, Help & Troubleshooting] lovejimia:
spooky187 can you send me the scripts to those radio and how to you them @ lovejimia@yahoo.com thanks!
[Nook Color General] eyecrispy:
Does anyone here use your NC with a Macbook Pro? When I connect my NC to my Macbook, it often tells me that the USB port is drawing too much power and then disables it. It even did that when I had only the USB end plugged in (without the NC).

So then I thought maybe it was my USB port on my Macbook and plugged my iPhone in and that sync'd just fine.

Ideas?
[Nook Color General] captfoss:
Standard usb draw is 500mA, whereas the nook pulls down 1900... No idea what the max output on a mac is, but its just going to suck down as much as it can, Id imagine...
[Nook Color General] 10equals2:
Usb spec lists 500mA as the max thata device can ask for. And the devices have to ask for that much.

It'll give them 100mA otherwise. I highly doubt that your NC is trying to draw that much from a standard usb port since that is not complying to standards and could fry whatever the nc is plugged into.

That would also make bn liable for the damage. Perhaps apple changed their usb to allow more current so that apple products can charge faster, perhaps the nook thinks that its plugged into the wall and can pull that much, perhaps the cable is slightly messed up, if that is how nc checks how much current it can draw. Which I'm sure it is since it won't fast charge from a normalcable.

Either the usb port is messed up or the cable is messed up or you've been ****ing with settings that shouldn't be touched. That's all I know. Trya different computer, or a different cable. This is too large of a bug for bn to let it into the wild. Something is nonstandard with your setup.
[Nook Color General] 10equals2:
specs

Usb spec lists 500mA as the max thata device can ask for. And the devices have to ask for that much.

It'll give them 100mA otherwise. I highly doubt that your NC is trying to draw that much from a standard usb port since that is not complying to standards and could fry whatever the nc is plugged into.

That would also make bn liable for the damage. Perhaps apple changed their usb to allow more current so that apple products can charge faster, perhaps the nook thinks that its plugged into the wall and can pull that much, perhaps the cable is slightly messed up, if that is how nc checks how much current it can draw. Which I'm sure it is since it won't fast charge from a normalcable.

Either the usb port is messed up or the cable is messed up or you've been ****ing with settings that shouldn't be touched. That's all I know. Trya different computer, or a different cable. This is too large of a bug for bn to let it into the wild. Something is nonstandard with your setup.
[Nook Color General] 10equals2:
Rereading your post your cable seems tobe the problem. Take it to bn store and ask them if you can try a different cable since yours seems to be messed up. If they give you problems go above their heads. Customer service people don't always know what they are doing.
[Nook Color General] eyecrispy:
Actually, there isn't anything nonstandard about my setup. I use my macbook stock for everyday things like email, web, etc.

Sent from my XDA app on my Nook Color
[Nook Color General] 10equals2:
Not what I meant by nonstandard. I was referring to usb specs. A device can only get 500ma using the standards. If its trying to pull almost 2 amps, something is not adhering to the standards. Meaning somethings busted.

Thinking about it further, the cable might be shorted. I wish I knew what the device used to know that it can pull that much. That could give a clue. A device I used in the past used a 10k resistor between the usb data lines to signal fast charging was possible. Shrug. I wouldn't use that cable for anything til I checked it. If you have a normal micro usb cable, you can use that to charge by computer. It'll just take a lot longer, and the nc won't tell you its charging. But it won't supply enough power to charge while the device is active. Leave the screen off etc. Don't use the offbrand cable with the wallcharger since it might be able to handle 2amps. Risk bburning that up.

Sorry somethings up, wish I could help more. Goodluck.
[Nook Color General] beamer069:
I had the same issue on a notebook last night. I have never had this error before, but it happened while I was rooting. Scared me because nook would not turn on. I thought my Nook was fried, but it powered on after rooting was complete. Thank God!
[Motorola Droid and Milestone General] drew630:
Hi, I posted this at the Cyanogen forums - but I figured I would ask here too:

I am trying to build CM6 from source. I have followed the Wiki but I am getting this error:

Finding NOTICE files: out/target/product/sholes/obj/NOTICE_FILES/hash-timestamp
Combining NOTICE files: out/target/product/sholes/obj/NOTICE.html
Target system fs image: out/target/product/sholes/obj/PACKAGING/systemimage_unopt_intermediates/system.img
Install system fs image: out/target/product/sholes/system.img
out/target/product/sholes/system.img+ total size is 152454720
error: out/target/product/sholes/system.img+ too large (152454720 > [151793664 - ])
make: *** [out/target/product/sholes/system.img] Error 1
make: *** Deleting file `out/target/product/sholes/system.img'

Any help would be great.. I have copied all of the proprietary files and have the latest source from the git repository.
[Focus General] burnblue:
Hope I can get some input

I bought a Focus from AT&T. I'm traveling in Jamaica. I unlocked my Focus using FastGSM. My problem is that I can't seem to get a data connection.

I'm using a local carrier called LIME that offers 3G, but in my area I think only GPRS is available. Anyway, here's the situation:

I have internet access when using the LIME sim in my already unlocked HTC Fuze

I have internet access when data roaming on LIME with the AT&T sim in my Focus

I can make calls and receive texts, with the LIME sim in my unlocked Focus

I can not get a data connection with the LIME sim in my unlocked Focus

This is all over GPRS

Any suggestions?
[Focus General] siralex241:
Can't exactly tell you what to do but, did you get the APN settings for the LIME network? I would search that and input those settings in your unlocked focus...you'll find that in settings>cellular>add apn

Any suggestions?
[Focus General] burnblue:
Thanks, looks like that did the trick. miserable experience, but some web access
[Nexus S General] crushsuitandtie:
Sorry is this is a duplicate thread... but apparently 2.3 has a debug menu for the keyboard which is accessible from Anycut. The menu has a keyboard theme menu in it. with about 6 themes already in it.

1) From anycut... create a shortcut to ANdroid Keyboard Debug Menu

2) enjoy. I like the stone theme.
[Nexus S General] ikon8:
Nice find.