US Cellular Blackberry's

From HowardForums Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 23:33, 6 November 2009
98.144.35.198 (Talk)

← Previous diff		 Revision as of 00:02, 7 November 2009
98.144.35.198 (Talk)

Next diff →
Line 13: Line 13:
== Getting SPC Code == == Getting SPC Code ==
<BR> <BR>
-The SPC is found in the following memory locations and length to scan:+The SPC is found in the following memory locations and length to scan:<BR>
- +<BR>
-Blackberry 8130 Pearl+'''Blackberry 8130 Pearl'''<BR>
-Address: 0x106C0000 Length: 1703936+Address: 0x106C0000 Length: 1703936<BR>
-Address: 0x10129990 Length: 25000+Address: 0x10129990 Length: 25000<BR>
-Address: 0x1067ED90 Length: 1703936+Address: 0x1067ED90 Length: 1703936<BR>
-Address: 0x10630000 Length: 1703936+Address: 0x10630000 Length: 1703936<BR>
- +<BR>
-Blackberry 8330 Curve+'''Blackberry 8330 Curve'''<BR>
-Address: 0x10700000 Length: 1703936+Address: 0x10700000 Length: 1703936<BR>
-Address: 0x1067ED90 Length: 1703936+Address: 0x1067ED90 Length: 1703936<BR>
- +<BR>
-Blackberry 8703e+'''Blackberry 8703e'''<BR>
-Address: 0x10050000 Length: 1703936+Address: 0x10050000 Length: 1703936<BR>
- +<BR>
-Blackberry 8800+'''Blackberry 8800'''<BR>
-Address: 0x10630000 Length: 1703936+Address: 0x10630000 Length: 1703936<BR>
- +<BR>
-Blackberry 8830 WE+'''Blackberry 8830 WE'''<BR>
-Address: 0x10600000 Length: 500000+Address: 0x10600000 Length: 500000<BR>
-Address: 0x10057700 Length: 524288+Address: 0x10057700 Length: 524288<BR>
- +<BR>
-Open UniCDMA and select the com port your Blackberry is on.+<BR>
-WinHex can be used to find the SPC in the file saved from UniCDMA.+Open UniCDMA and select the com port your Blackberry is on.<BR>
- +Select the Memory tab/button<BR>
- +In the Read Memory section, enter the memory address and length from above<BR>
 +Click Read and Save to File button<BR>
 +Save the file where you can find it<BR>
 +After binary file is saved you can close UniCDMA<BR>
 +<BR>
 +Open the file that you saved from UniCDMA in WinHEX<BR>
 +Click the SPECIALIST menu.<BR>
 +Click the GATHER TEXT<BR>
 +Set it to6 succession, only numbers and have Unicode characters tolerated.<BR>
 +It will want to save another file, do so<BR>
 +The new file will contain your SPC (6 digit code)<BR>
 +<BR>
 +<BR>
 +== Load PRL and Change SPC to 000000 ==
 +<BR>
 +In QXDM command output window, enter the following commands"<BR>
 +<BR>
 +mode offline-d<BR>
 +<BR>
 +spc "000000"<BR>
 +''Replace 000000 with the 6 digit code.''<BR>
 +<BR>
 +pr_list_wr 0 "C:\51600.prl"<BR>
 +''Change the file path and name to the location of PRL''<BR>
 +<BR>
 +nv_write sec_code {"000000"}<BR>
 +<BR>
 +<BR>
 +<BR>
== Getting Data To Work == == Getting Data To Work ==
Line 65: Line 93:
<BR> <BR>
Click Write to phone<BR> Click Write to phone<BR>
 +''Phone should restart''
<BR> <BR>
-after phone reboots enter ##SPCCODE Talk<BR> 
-On programming screen SIP User ID is mobilenumber@vzw3g.com<BR> 
-SIP Password is vzw<BR> 
<BR> <BR>
 +<BR>
 +
 +== Manually Programming the Phone ==
 +<BR>
 +After phone reboots enter ##SPCCODE Talk<BR>
 +Press the Menu button and click Edit BB REG ID and Enter you SID, press Menu, select Save...<BR>
 +In BB REG IDs in List, highlight the number that is not your SID and press the Menu button, click Delete<BR>
 +Press the Menu key and select Close<BR>
 +Enter your phone number in the Mobile Directory Number field.<BR>
 +Enter your MIN in the IMSI_S field.<BR>
 +Enter your SID in the Home SID field<BR>
 +Further down on programming screen SIP User ID is mobilenumber@vzw3g.com<BR>
 +SIP Password is vzw<BR>
If there is another field that contains an email address, replace it with mobilenumber@vzw3g.com<BR> If there is another field that contains an email address, replace it with mobilenumber@vzw3g.com<BR>
<BR> <BR>
-Save<BR>+Press the Menu button and select Save<BR>
- +''Phone should restart''
- +<BR>
- +<BR>
-'''Note: The Anworm books seem to work on most models. The rest of this tutorial (the pc-tech101 part) is experimental and has only been proven to work (mostly) on a US Cellular Blackberry Pearl 8130. It also seems like MMS receive may not work either. This page will be revised/clarified once we figure out (hopefully) what works and doesn't on a per carrier and per model basis. ''' +<BR>
- +
- Blackberrys appear to not support MMS 100%. +
- Some models will send but do not receive.+
- +
-'''Procedure:'''+
-* Learn about loading service books using the Anworm guide:+
-** http://bb.anworm.com/Home/english+
-* '''pc-tech101''' has merged some Verizon books with the Anworm books to enable other features including MMS.+
 +== Enabling Blackberry Browser & Maps and MMS ==
 +<BR>
 +PC-Tech101 has merged some Verizon books with the Anworm books to enable other features including MMS.<BR>
 +<BR>
** Provisioning ** Provisioning
** Blackberry Maps ** Blackberry Maps
** MMS Transport ** MMS Transport
** MMS Client ** MMS Client
- +<BR>
-* Download from here and install using the Anworm guide:+[http://www.4shared.com/file/145296898/a1556b6b/Browser_via_TCP_and_BBMAPS_MMS.html Browser_via_TCP_and_BBMAPS_MMS]<BR>
-**http://www.4shared.com/file/145296898/a1556b6b/Browser_via_TCP_and_BBMAPS_MMS.html+<BR>
- +
-* Finally, here is a guide for enabling GPS:+
-** http://www.4shared.com/file/135159963/a11f42fb/How_to_get_your_GPS_to_work_for_BlackBerry.html+
- +
-Note: The mods above were successfully implemented on YMMV. +
<BR> <BR>
Note: To enable Legacy mode, use the following methods Note: To enable Legacy mode, use the following methods
Line 108: Line 138:
You will see the lock<BR> You will see the lock<BR>
Then press 4?2?<BR> Then press 4?2?<BR>
 + <BR>
It should show Legacy Enabled.<BR> It should show Legacy Enabled.<BR>
<BR> <BR>
<BR> <BR>
<BR> <BR>
-<BR> 
-<BR> 
-<BR> 
-<BR> 
-Ref: http://www.howardforums.com/showthread.php?t=1572974 
- 
- 
-'''Other tools for BB:''' 
- 
-Data usage monitor: http://www.ehnert.net/MiniMoni/ 
- 
-Email without BIS: http://my.funambol.com 
- 
-Alternative build for funambol (drops email into BB inbox): http://funambol-bb.sourceforge.net/ 

Revision as of 00:02, 7 November 2009

Contents

Getting started


You will need:

  • QPST 2.7 215
  • QXDM 2.08
  • UniCDMA
  • WinHEX
  • Blackberry Desktop Manager (MUST BE RUNNING ANYTIME PHONE IS CONNECTED TO PC)




Getting SPC Code


The SPC is found in the following memory locations and length to scan:

Blackberry 8130 Pearl
Address: 0x106C0000 Length: 1703936
Address: 0x10129990 Length: 25000
Address: 0x1067ED90 Length: 1703936
Address: 0x10630000 Length: 1703936

Blackberry 8330 Curve
Address: 0x10700000 Length: 1703936
Address: 0x1067ED90 Length: 1703936

Blackberry 8703e
Address: 0x10050000 Length: 1703936

Blackberry 8800
Address: 0x10630000 Length: 1703936

Blackberry 8830 WE
Address: 0x10600000 Length: 500000
Address: 0x10057700 Length: 524288


Open UniCDMA and select the com port your Blackberry is on.
Select the Memory tab/button
In the Read Memory section, enter the memory address and length from above
Click Read and Save to File button
Save the file where you can find it
After binary file is saved you can close UniCDMA

Open the file that you saved from UniCDMA in WinHEX
Click the SPECIALIST menu.
Click the GATHER TEXT
Set it to6 succession, only numbers and have Unicode characters tolerated.
It will want to save another file, do so
The new file will contain your SPC (6 digit code)


Load PRL and Change SPC to 000000


In QXDM command output window, enter the following commands"

mode offline-d

spc "000000"
Replace 000000 with the 6 digit code.

pr_list_wr 0 "C:\51600.prl"
Change the file path and name to the location of PRL

nv_write sec_code {"000000"}



Getting Data To Work


You will need QPST 2.15
Set it to use: Sur6300-BB
Read from phone
Open M.IP tab
Edit profile 0
NAI and Tethered NAI should be mobilenumber@vzw3g.com (replace mobilenumber with actual telephone number including area code)
MN-HA SPI should be 12C
MN-AAA SPI should be 2
DMU Public Key ID should be 10
Rev Tunnel Preferred checked
Home, Primary and Secondary HA address are all 0.0.0.0
click ok

click PPP Config tab
click Um button
Tethered NAI and User ID should be mobilenumber@vzw3g.com
Password should be vzw
check 1xEVDO->1x
click AN button
User ID should be mobilenumber@vzw3g.com

Click Write to phone
Phone should restart


Manually Programming the Phone


After phone reboots enter ##SPCCODE Talk
Press the Menu button and click Edit BB REG ID and Enter you SID, press Menu, select Save...
In BB REG IDs in List, highlight the number that is not your SID and press the Menu button, click Delete
Press the Menu key and select Close
Enter your phone number in the Mobile Directory Number field.
Enter your MIN in the IMSI_S field.
Enter your SID in the Home SID field
Further down on programming screen SIP User ID is mobilenumber@vzw3g.com
SIP Password is vzw
If there is another field that contains an email address, replace it with mobilenumber@vzw3g.com

Press the Menu button and select Save
Phone should restart


Enabling Blackberry Browser & Maps and MMS


PC-Tech101 has merged some Verizon books with the Anworm books to enable other features including MMS.

  ** Provisioning
  ** Blackberry Maps
  ** MMS Transport
  ** MMS Client


Browser_via_TCP_and_BBMAPS_MMS


  Note: To enable Legacy mode, use the following methods 
  (you must be in service books under advanced settings):

  

  ALT S ALT B ALT E ALT B

  OR

  ALT S S ALT B ALT E ALT B

  To load Service Books On the Storm press and hold num button until it locks

  You will see the lock

  Then press 4?2?

  

  It should show Legacy Enabled.




Retrieved from "http://wiki.howardforums.com/index.php/US_Cellular_Blackberry%27s"