Essential Tools for changing CDMA carrier on the Pre

寂夜清风

这种方式操作上的可行性还没有测试..
- w0 L3 _1 X. T" ~需要配合使用的软件还有
QPST_2.7_build_323
1 P# n2 q8 E" c9 ^6 `0 c& y9 j& b, lQXDM31136
cdma_workshop
4 @  d+ {' k# F- Q1 w. u
Qualcomm QPST tools (Can change NV items and such)
+ |# ~0 Z% x, h  qQXDM = Diagnostic Monitoring Tool that can allow you to hex edit items
0 k  h$ E# w6 j' }CDMA-workshop = Think of it as a hybrid of qxdm and QPST (This cracked version may show up as a trojan on your AV software)

Tilipctest = a tool that allows you to change your modem and CDMA settings on the phone
/ v# d! O; K! g$ \9 YPmModemFactory = a tool that allows you to edit and read NV/memory locations on your phone. (this tool can be used to retrieve SPC/MSL)
( z/ ?( c) {( H1 m1 S* q- _) F# Y$ @* x
For these 2 programs you will need to drop them in the /usr/bin folder of your pre
then as root

1. chmod +x /usr/bin/Tilipctest
   
2. chmod +x /usr/bin/PmModemFactory
   ( d/ ~5 L, \  m9 L9 e  y
3. 
   4 W9 p% V( m* F9 R# b

复制代码

Here are some NV item locations and what is stored in them These are proprietary NV locations for the Palm Pre
Cant read hex? Here is a link for an awesome conversion tool http://home2.paulschou.net/tools/xlate/

1. 09000 = 02 (I believe this specifies the carrier pri, 02 = sprint and 01 = VZW)
   
2. 09006 = Sprint Provisioning #777 (this is what it says)
   
3. 09007 = 0 127 0 0 127 0 255 (decimal data)
   
4. 09011 = 911 stuff
   
5. 09012 = 6/21/2009 (possible build date?)
   * E7 C5 J7 j9 }0 @
6. 09014 = 113 2 0 0 29 1 (?????? HomeNID/SID data??)
   6 g: j; j9 Q8 s; {' j- m
7. 09021 = http://mms.vtext.com/servlets/mms (i changed this one already to test, i dont remember the original sprint MMS value)
   
8. 09023 = http://pictures.sprintpcs.com/WMTP_3_4
   $ Q0 l- L2 B2 _% T( w8 d
9. 09025xx = 1 31 28 68 80 (port then IP for primary gateway, in reverse)
   ) O5 F7 F! l- o( H3 g# j
10. 09030 = 160 (decimal value, no idea wtf it is)
    
11. 09047 = Sprint (banner)
    
12. 09055xx = 20 31 28 68 (decimal, IP or something, in reverse)
    4 D  w2 L5 w; z- ~% q" ]
13. 09057 = http://mcd.sprintpcs.com/redirect?request=multimedia
    
14. 09076 = http://vision.sprintpcs.com
    
15. 09077 = http://vm.sprintpcs.com/redirect
    
16. 09079 = http://.sprintpcs.com
    + \  `7 y5 _! P# H' T! V9 v- @+ H+ i5 A
17. 09104 = @hcm.sprintpcs.com
    $ c1 ~6 h  F$ B
18. 09105 = MYpESN@hcm.sprintpcs.com AND @hcm.sprintp
    3 w9 f/ K+ h( w* z' P0 }) T
19. 09108 = @hcm.sprintpcs.com AND @hcm.sprintpcs.com
    ' C! r. Z# `0 y' X9 C
20. 09109 = @hcm.sprintpcs.com AND @hcm.sprintpcs.com
    9 D( G( h8 z) H( H( l( ?2 `2 J
21. 09110 = MYpESN@hcm.sprintpcs.com (LENGTH MARKER HERE)
    ( J% f4 b8 k% E/ U$ B$ Y  C
22. 09111 = 16 16 13 12 255 255 255 255
    
23. 09152xx = 33 31 28 68 80 80 (IP port in reverse, proxy NGG?)
    
24. 09153xx = 33 31 28 68 80 80 (IP port in reverse, proxy NGG?)

复制代码

http://www.c4pda.com/showthread.php?t=68179