Sprint Blackberry's

From HowardForums Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 20:05, 6 November 2009
98.144.35.198 (Talk)

← Previous diff		 Revision as of 00:03, 7 November 2009
98.144.35.198 (Talk)

Next diff →
Line 1: Line 1:
-'''Note: The Anworm books seem to work on most models. The rest of this tutorial (the pc-tech101 part) is experimental and has only been proven to work (mostly) on a US Cellular Blackberry Pearl 8130. It also seems like MMS receive may not work either. This page will be revised/clarified once we figure out (hopefully) what works and doesn't on a per carrier and per model basis. ''' +== Getting started ==
- +<BR>
- Blackberrys appear to not support MMS 100%. +You will need:<BR>
- Some models will send but do not receive.+*QPST 2.7 215<BR>
 +*QXDM 2.08<BR>
 +*UniCDMA<BR>
 +*WinHEX<BR>
 +*Blackberry Desktop Manager (MUST BE RUNNING ANYTIME PHONE IS CONNECTED TO PC)<BR>
 +<BR>
 +<BR>
 +<BR>
-'''Procedure:'''+== Getting SPC Code ==
-* Learn about loading service books using the Anworm guide:+<BR>
-** http://bb.anworm.com/Home/english+The SPC is found in the following memory locations and length to scan:<BR>
-* '''pc-tech101''' has merged some Verizon books with the Anworm books to enable other features including MMS.+<BR>
 +'''Blackberry 8130 Pearl'''<BR>
 +Address: 0x106C0000 Length: 1703936<BR>
 +Address: 0x10129990 Length: 25000<BR>
 +Address: 0x1067ED90 Length: 1703936<BR>
 +Address: 0x10630000 Length: 1703936<BR>
 +<BR>
 +'''Blackberry 8330 Curve'''<BR>
 +Address: 0x10700000 Length: 1703936<BR>
 +Address: 0x1067ED90 Length: 1703936<BR>
 +<BR>
 +'''Blackberry 8703e'''<BR>
 +Address: 0x10050000 Length: 1703936<BR>
 +<BR>
 +'''Blackberry 8800'''<BR>
 +Address: 0x10630000 Length: 1703936<BR>
 +<BR>
 +'''Blackberry 8830 WE'''<BR>
 +Address: 0x10600000 Length: 500000<BR>
 +Address: 0x10057700 Length: 524288<BR>
 +<BR>
 +<BR>
 +Open UniCDMA and select the com port your Blackberry is on.<BR>
 +Select the Memory tab/button<BR>
 +In the Read Memory section, enter the memory address and length from above<BR>
 +Click Read and Save to File button<BR>
 +Save the file where you can find it<BR>
 +After binary file is saved you can close UniCDMA<BR>
 +<BR>
 +Open the file that you saved from UniCDMA in WinHEX<BR>
 +Click the SPECIALIST menu.<BR>
 +Click the GATHER TEXT<BR>
 +Set it to6 succession, only numbers and have Unicode characters tolerated.<BR>
 +It will want to save another file, do so<BR>
 +The new file will contain your SPC (6 digit code)<BR>
 +<BR>
 +<BR>
 +== Load PRL and Change SPC to 000000 ==
 +<BR>
 +In QXDM command output window, enter the following commands"<BR>
 +<BR>
 +mode offline-d<BR>
 +<BR>
 +spc "000000"<BR>
 +''Replace 000000 with the 6 digit code.''<BR>
 +<BR>
 +pr_list_wr 0 "C:\51600.prl"<BR>
 +''Change the file path and name to the location of PRL''<BR>
 +<BR>
 +nv_write sec_code {"000000"}<BR>
 +<BR>
 +<BR>
 +<BR>
 +
 +== Getting Data To Work ==
 +<BR>
 +You will need QPST 2.15<BR>
 +Set it to use: Sur6300-BB<BR>
 +Read from phone<BR>
 +Open M.IP tab<BR>
 +Edit profile 0<BR>
 +NAI and Tethered NAI should be mobilenumber@vzw3g.com (replace mobilenumber with actual telephone number including area code)<BR>
 +MN-HA SPI should be 12C<BR>
 +MN-AAA SPI should be 2<BR>
 +DMU Public Key ID should be 10<BR>
 +Rev Tunnel Preferred checked<BR>
 +Home, Primary and Secondary HA address are all 0.0.0.0<BR>
 +click ok<BR>
 +<BR>
 +click PPP Config tab<BR>
 +click Um button<BR>
 +Tethered NAI and User ID should be mobilenumber@vzw3g.com<BR>
 +Password should be vzw<BR>
 +check 1xEVDO->1x<BR>
 +click AN button<BR>
 +User ID should be mobilenumber@vzw3g.com<BR>
 +<BR>
 +Click Write to phone<BR>
 +''Phone should restart''
 +<BR>
 +<BR>
 +<BR>
 +
 +== Manually Programming the Phone ==
 +<BR>
 +After phone reboots enter ##SPCCODE Talk<BR>
 +Press the Menu button and click Edit BB REG ID and Enter you SID, press Menu, select Save...<BR>
 +In BB REG IDs in List, highlight the number that is not your SID and press the Menu button, click Delete<BR>
 +Press the Menu key and select Close<BR>
 +Enter your phone number in the Mobile Directory Number field.<BR>
 +Enter your MIN in the IMSI_S field.<BR>
 +Enter your SID in the Home SID field<BR>
 +Further down on programming screen SIP User ID is mobilenumber@vzw3g.com<BR>
 +SIP Password is vzw<BR>
 +If there is another field that contains an email address, replace it with mobilenumber@vzw3g.com<BR>
 +<BR>
 +Press the Menu button and select Save<BR>
 +''Phone should restart''
 +<BR>
 +<BR>
 +<BR>
 +
 +== Enabling Blackberry Browser & Maps and MMS ==
 +<BR>
 +PC-Tech101 has merged some Verizon books with the Anworm books to enable other features including MMS.<BR>
 +<BR>
** Provisioning ** Provisioning
** Blackberry Maps ** Blackberry Maps
** MMS Transport ** MMS Transport
** MMS Client ** MMS Client
- +<BR>
-* Download from here and install using the Anworm guide:+[http://www.4shared.com/file/145296898/a1556b6b/Browser_via_TCP_and_BBMAPS_MMS.html Browser_via_TCP_and_BBMAPS_MMS]<BR>
-**http://www.4shared.com/file/145296898/a1556b6b/Browser_via_TCP_and_BBMAPS_MMS.html+<BR>
- +
-* Finally, here is a guide for enabling GPS:+
-** http://www.4shared.com/file/135159963/a11f42fb/How_to_get_your_GPS_to_work_for_BlackBerry.html+
- +
-Note: The mods above were successfully implemented on YMMV. +
<BR> <BR>
Note: To enable Legacy mode, use the following methods Note: To enable Legacy mode, use the following methods
(you must be in service books under advanced settings):<BR> (you must be in service books under advanced settings):<BR>
<BR> <BR>
- ALT+ ALT S ALT B ALT E ALT B<BR>
- S+
- ALT+
- B+
- ALT+
- E+
- ALT+
- B+
- <BR>+
OR<BR> OR<BR>
- <BR>+ ALT S S ALT B ALT E ALT B<BR>
- ALT+
- S+
- S+
- ALT+
- B+
- ALT+
- E+
- ALT+
- B+
- <BR>+
To load Service Books On the Storm press and hold num button until it locks<BR> To load Service Books On the Storm press and hold num button until it locks<BR>
You will see the lock<BR> You will see the lock<BR>
Then press 4?2?<BR> Then press 4?2?<BR>
- It will show enabled.<BR>+ <BR>
-<BR>+ It should show Legacy Enabled.<BR>
<BR> <BR>
<BR> <BR>
<BR> <BR>
-<BR> 
-<BR> 
-<BR> 
-Ref: http://www.howardforums.com/showthread.php?t=1572974 
- 
- 
-'''Other tools for BB:''' 
- 
-Data usage monitor: http://www.ehnert.net/MiniMoni/ 
- 
-Email without BIS: http://my.funambol.com 
- 
-Alternative build for funambol (drops email into BB inbox): http://funambol-bb.sourceforge.net/ 

Revision as of 00:03, 7 November 2009

Contents

Getting started


You will need:

  • QPST 2.7 215
  • QXDM 2.08
  • UniCDMA
  • WinHEX
  • Blackberry Desktop Manager (MUST BE RUNNING ANYTIME PHONE IS CONNECTED TO PC)




Getting SPC Code


The SPC is found in the following memory locations and length to scan:

Blackberry 8130 Pearl
Address: 0x106C0000 Length: 1703936
Address: 0x10129990 Length: 25000
Address: 0x1067ED90 Length: 1703936
Address: 0x10630000 Length: 1703936

Blackberry 8330 Curve
Address: 0x10700000 Length: 1703936
Address: 0x1067ED90 Length: 1703936

Blackberry 8703e
Address: 0x10050000 Length: 1703936

Blackberry 8800
Address: 0x10630000 Length: 1703936

Blackberry 8830 WE
Address: 0x10600000 Length: 500000
Address: 0x10057700 Length: 524288


Open UniCDMA and select the com port your Blackberry is on.
Select the Memory tab/button
In the Read Memory section, enter the memory address and length from above
Click Read and Save to File button
Save the file where you can find it
After binary file is saved you can close UniCDMA

Open the file that you saved from UniCDMA in WinHEX
Click the SPECIALIST menu.
Click the GATHER TEXT
Set it to6 succession, only numbers and have Unicode characters tolerated.
It will want to save another file, do so
The new file will contain your SPC (6 digit code)


Load PRL and Change SPC to 000000


In QXDM command output window, enter the following commands"

mode offline-d

spc "000000"
Replace 000000 with the 6 digit code.

pr_list_wr 0 "C:\51600.prl"
Change the file path and name to the location of PRL

nv_write sec_code {"000000"}



Getting Data To Work


You will need QPST 2.15
Set it to use: Sur6300-BB
Read from phone
Open M.IP tab
Edit profile 0
NAI and Tethered NAI should be mobilenumber@vzw3g.com (replace mobilenumber with actual telephone number including area code)
MN-HA SPI should be 12C
MN-AAA SPI should be 2
DMU Public Key ID should be 10
Rev Tunnel Preferred checked
Home, Primary and Secondary HA address are all 0.0.0.0
click ok

click PPP Config tab
click Um button
Tethered NAI and User ID should be mobilenumber@vzw3g.com
Password should be vzw
check 1xEVDO->1x
click AN button
User ID should be mobilenumber@vzw3g.com

Click Write to phone
Phone should restart


Manually Programming the Phone


After phone reboots enter ##SPCCODE Talk
Press the Menu button and click Edit BB REG ID and Enter you SID, press Menu, select Save...
In BB REG IDs in List, highlight the number that is not your SID and press the Menu button, click Delete
Press the Menu key and select Close
Enter your phone number in the Mobile Directory Number field.
Enter your MIN in the IMSI_S field.
Enter your SID in the Home SID field
Further down on programming screen SIP User ID is mobilenumber@vzw3g.com
SIP Password is vzw
If there is another field that contains an email address, replace it with mobilenumber@vzw3g.com

Press the Menu button and select Save
Phone should restart


Enabling Blackberry Browser & Maps and MMS


PC-Tech101 has merged some Verizon books with the Anworm books to enable other features including MMS.

  ** Provisioning
  ** Blackberry Maps
  ** MMS Transport
  ** MMS Client


Browser_via_TCP_and_BBMAPS_MMS


  Note: To enable Legacy mode, use the following methods 
  (you must be in service books under advanced settings):

  

  ALT S ALT B ALT E ALT B

  OR

  ALT S S ALT B ALT E ALT B

  To load Service Books On the Storm press and hold num button until it locks

  You will see the lock

  Then press 4?2?

  

  It should show Legacy Enabled.




Retrieved from "http://wiki.howardforums.com/index.php/Sprint_Blackberry%27s"