Essential Tools for changing CDMA carrier on the Pre

寂夜清风 · 发表于 2009-9-23 11:22

这种方式操作上的可行性还没有测试..
需要配合使用的软件还有
QPST_2.7_build_323
QXDM31136
cdma_workshop

Qualcomm QPST tools (Can change NV items and such)
QXDM = Diagnostic Monitoring Tool that can allow you to hex edit items
CDMA-workshop = Think of it as a hybrid of qxdm and QPST (This cracked version may show up as a trojan on your AV software)

Tilipctest = a tool that allows you to change your modem and CDMA settings on the phone
PmModemFactory = a tool that allows you to edit and read NV/memory locations on your phone. (this tool can be used to retrieve SPC/MSL)

For these 2 programs you will need to drop them in the /usr/bin folder of your pre
then as root

chmod +x /usr/bin/Tilipctest
% ?4 v! X; J: ~4 A8 J3 K8 [* ~7 u
chmod +x /usr/bin/PmModemFactory
' q1 {* V5 D. X1 T3 V: [0 c
$ r5 }+ U' M9 h* O; J' d- k

复制代码

Here are some NV item locations and what is stored in them These are proprietary NV locations for the Palm Pre
Cant read hex? Here is a link for an awesome conversion tool http://home2.paulschou.net/tools/xlate/

09000 = 02 (I believe this specifies the carrier pri, 02 = sprint and 01 = VZW)* D5 N; M: j! s' g" ?9 Z
09006 = Sprint Provisioning #777 (this is what it says)0 z1 K0 a ?' e& S5 y) z
09007 = 0 127 0 0 127 0 255 (decimal data)
4 S: I# U+ I9 E, n' ?3 ]) ^6 U
09011 = 911 stuff' c* `9 Y% d& p' S6 q
09012 = 6/21/2009 (possible build date?)+ l5 J& x7 v3 `, E. w$ F& y: c
09014 = 113 2 0 0 29 1 (?????? HomeNID/SID data??)
8 E' g/ m) @# l! d' v5 P4 M
09021 = http://mms.vtext.com/servlets/mms (i changed this one already to test, i dont remember the original sprint MMS value)
* z* G5 m' p! R' c8 x
09023 = http://pictures.sprintpcs.com/WMTP_3_4+ s6 I5 U: @' c" a9 [
09025xx = 1 31 28 68 80 (port then IP for primary gateway, in reverse)
* C) Y8 j4 ^8 b; S: F9 T/ m! I3 D2 Z
09030 = 160 (decimal value, no idea wtf it is)8 V6 j1 E/ z6 D$ E
09047 = Sprint (banner)0 y( P$ R7 Z8 J) W
09055xx = 20 31 28 68 (decimal, IP or something, in reverse)
' L7 _: U* Z) a3 n3 A
09057 = http://mcd.sprintpcs.com/redirect?request=multimedia* u6 F0 S1 b9 w8 j+ _8 W# D3 }
09076 = http://vision.sprintpcs.com
! d( q# M3 B* e3 c+ i# d" K5 H! ~
09077 = http://vm.sprintpcs.com/redirect8 S/ @1 A& |; p
09079 = http://.sprintpcs.com' p; j4 P6 H+ y# ]: k* a. y! @% J4 f
09104 = @hcm.sprintpcs.com1 ^0 B% ? L; D' a
09105 = MYpESN@hcm.sprintpcs.com AND @hcm.sprintp 0 o% c0 u% {- ^% V/ D' Q
09108 = @hcm.sprintpcs.com AND @hcm.sprintpcs.com) g8 j2 c/ s/ C6 u
09109 = @hcm.sprintpcs.com AND @hcm.sprintpcs.com) G, ~; g* `, A3 Y! E [" }
09110 = MYpESN@hcm.sprintpcs.com (LENGTH MARKER HERE)5 ~% @* g1 [, ~( y: N
09111 = 16 16 13 12 255 255 255 255
& F) z' q4 e# V+ s
09152xx = 33 31 28 68 80 80 (IP port in reverse, proxy NGG?)
# g W G6 @! O
09153xx = 33 31 28 68 80 80 (IP port in reverse, proxy NGG?)

复制代码

http://www.c4pda.com/showthread.php?t=68179

账号		自动登录	找回密码
密码			加入我们

[webOS开发] Essential Tools for changing CDMA carrier on the Pre

本帖子中包含更多资源