HOWTO: To change 700p ESN without bitpim/CRC patch etc.

[sexyrahh]

Hello i have two sprint treo 700p and i needwant to change the esn so i can get them activated..i had them in my ex namew.. and now she and ex... so please could you help.. sexyrahh@yahoo.com

[kocoman]

Which part do you need help with? I have someone who change ESN successfully by reading my howto.

[prominator]

it is hard to follow your tutorial

[kocoman]

I posted another one that another user wrote for me, hopefully its more understandable.

How to make treo to run on other network by ESN repair
Perquisites:

1. Treo 700P handset
2. USB data cable
3. MTTY 1.42
4. Treo 650 boot loader driver
5. SD / MMC card. Do not use Mini / Micro SD with adaptor as mentioned on palm site. I dont know. I used MMC card.
6. Resco explorer to copy files from ROM to SD card.
7. CDMA updater program files

Attached RAR file contains:

1. Drivers
2. MTTY 1.42
3. Resco explorer
4. CDMA updater (Attached for sprint, I tested same file from verizon on my sprint phone and it works so this file must work on verizon too.)

How to do it:

1. Insert you SD card in to treo, treo will automatically create file system. Where you will see following folder tree Palm -> Launcher, all .prc files or programmes are to be copied in launcher folder. Alternatively you can hotsync these two file to your device too. If you choose hot syncing, remember to uninstall hotsync and reboot your computer, else your phone may not be detected

2. Copy CDMA updater .prc program file and *_en*.oprc language files to launcher folder of memory card.

3. Launch CDMAFirmwareUpdater.prc after a while, white screen, it will lauch, press butten similar to right click, it is bottom right button, next to ALT key, select debug, select Backup NV option, unselect all other options. and run UPDATE now.

4. After some time it will say that backup sucessful etc.

5. Launch Resco explorer, go to Drive Named RAM0 and find CDMA NV BACKUP.PDB, copy it to SD card.

6. Download file to your computer.

Here is next step to write ESN to back up file and its very important.

1. Open file with any hex editor, in my phone back up I found important data at following address:

SPC: If you want your phone to programmed by *228, then this is important code: 0000F770
MSL, this code is used to access phone nam programming: 0000F670
ESN: Esn found 3 locations, I dont know why, but when I made mistake on one location, phone kept on rebooting when I entered ##MSL# code. SO I changed ESN at all locations. ESN is in reverse

1: 0000CF00
2. 0000CFA0
3. 0000EA40

Copy modified file to Memory card.

Once you update all this, means you have prepared necessary stuff to repair SN on handset.

Then

1. Install bootloader driver.

2. Connect your handset to PC with USB cable. Press button on hotsync cable for a while, Once you get message that palm hot sync detected, dial ##UPST# and phone will be in boot loader mode.

3. Your computer will detect USBSYNC hardware.

4. Launch MTTY 1.42, select USB port and start.

5. Once connected type

cdmar bl usb

It will answer:
+CDMARouterCommnad...CDMA Mode = bl, PC Port = usb, CDMA Uart Speed = 115200

Type: nverase
Answer: Identify INTEL Combo Flash !



Identify INTEL Combo Flash !

********************************



Erase NV Item Data Done!

CDMA DBG>

Now done, Reboot phone, by disconnecting and removing battery.

Once phone is rebooted:

Insert memory card.
Launch Resco explorer
Copy back file from memory card to RAM0, when asked, overwrite existing file.
Lauch CDMA updater, and select debug, uncheck all option except restore NV.
Check and verify MSL by dialing ##MSLCODE# and ESN in phone -> option -> phone info.

Once NV back up is restored, you are done, you have NEW SN, SPC and MSL on handset. you can dial *228 to activate or PRL update as supported by your operator.

If you have MIN available with you then:

dial ##MSL# and edit Mobile number to your MIN and MSID to your MIN.

dial ##data# and select advance

Options Required:

1. Vocoder EVRC=1 (Most digital network support EVRC)
2. Home NID: Your operators NID code
Home NID: Your operators SID code
MCC: Your contry code
MNC: Your mobile network code


Special thanks to Kocoman for being very helpful in teaching me this and guiding me. This guide is posted with his permission.

[Constantine]

Where are the Attached Files.I didnt Find anywhere.Please Post or Send me at My Email ID moderate_sam@yahoo.com

Regards,
Constantine...@

[kocoman]

Find them at mobile-files.com 700p esn thread. Don't want shadowmite get trouble with palm (DUN hacks)

[Constantine]

Find them at mobile-files.com 700p esn thread. Don't want shadowmite get trouble with palm (DUN hacks)

Thanks i found the Attached Files at the mentioned link.

I will try and post the result.

Wbr,
Constantine..

[horton72]

hello everybodi, sorry no hablo ingles soy de acapulco mexico, ya hice todo el procedimiento para liberar una treo 755p lo unico que no puedo modificar es el nvm backup con otro esn no se usar el editor tengo ya el numero de telefono el esn y el mid que le quiero poner pero no se como hacerle. alguien me puede ayudar ? gracias y saludos

[m4f1050]

I think it's easier to do the QPST EFS Explorer, go to nvm folder and $SYS$.ESN and edit the file, use CDMA Workshop to calculate the checksum, the last 12 characters on the file 1-4 are ESN backwards, 5-8 checksum backwards and 9-12 do not change. Write $SYS$.ESN back on phone and reset.

[BiggDadd73]

What happens if the last four digits are changed in error? Is there anyway to find out what they were? I am not able to get a signal, phone just roams...and I have verified every EPST setting and double and triple checked the ESN and Checksum (both are correct)
Any help would be appreciated...

[panto77]

Hey man!

Can you share the information with us too?
I have Treo 700p for Verizon. I am looking to flash my phone to use with Cricket service.
Please send me here: panto77@yahoo.com