Updated: 06/22/07 07:36 am
Using the Alltel Monster firmware on
your Verizon V3C/V3M/K1M Phone.....
NOTE: If you have a V3M or K1M that use an MEID this will NOT WORK!! and you risk turning your phone into a paperweight (to check, remove the battery, look at the label. )
PLEASE SEE THE WIKI for the Pros/Cons of using the Alltel firmware FIRST!!
Currently, Verizon V3C, V3M, and KRZR K1m
MONSTER firmwares have been leaked, so if you can NOT get this working, you can
flash back to the Verizon Monsters and be just like the "fresh out of the box"
Verizon state. See -> Flash from Alltel Firmware
back to Verizon's Firmware.
I only have a V3C to try this on... and it
works for me... In theory, it should also work for V3M and Krzr K1M Alltel monster firmwares,
BUT I can NOT personally test since I don't have those phones!!!
Please Note: This process is probably NOT 100% fool
proof, there may be varying degrees of success. For additional background,
you're welcome to read -> Getting Non-Verizon Monsters working: The only thing consistent is inconsistency
Preface:
PLEASE READ THE ENTIRE GUIDE CAREFULLY BEFORE YOU ATTEMPT THIS!!!!
THIS DOES VOID YOUR WARRANT!! And Verizon will NOT support you with the
Alltel firmware on your phone!
This process uses various DANGEROUS TOOLS!!! There
is also some automation involved. This leads to potential pit falls and
problems. Use CAUTION and BE CAREFUL when following this...
This is based upon the former write up -> Monster1.htm which is
based upon the work of others...
As you can see by reading the linked threads
and such.. a lot of people have worked
hard to come up with this!! Thanks to Jlbrightbill, DanFPW, cpuguy06, and
the others posting in the threads.... Special Thanks to GoldMembr,
without whom, none of this would be possible... and KBMAN for putting ideas in
my head, and providing suggestions, feed back and valuable info! And Thanks to Evade
for the RadioComm info and the idea about using the table for backup and restore
of the SEEMS!!
This work was also pulled together and refined
based on discussions in the following threads...
Alltel V3C Monster -> http://www.howardforums.com/showthread.php?t=1064653
Alltel K1M Monster -> http://www.howardforums.com/showthread.php?t=1069181
Alltel V3M Monster -> http://www.howardforums.com/showthread.php?t=1072371
MetroPCS V3C Monster -> http://www.howardforums.com/showthread.php?t=1067164
just to name a few...
Discuss this process in -> Getting Alltel V3C/V3M/K1M Monster firmwares working: A more Automated Process
NOTE: I may still have a few corrections/edits
to make over the next few days/weeks??
Required...
1. USB Cable (see the FAQ)
2. Install the Motorola USB Modem drivers.
3. Install and configure Motorola PST v7.25 and its drivers, along with testing its
connection (Formerly known as the Prep-work section of the Seem Edit page).
(Sorry, No WAREZ links here).
4. Install P2KSeem for V710. (To install P2KSeem for V710.. Just unzip all the files
in the archive you downloaded to a folder. It does not need to be "installed." There is no
"setup" program.)
5. Alltel Firmware flash file.. (obtain from http://www.humpa.com/vzw or http://ryfiles.com/flash or Phone Encyclopedia link at phonenews.com)
6. QPST v2.7 Build 215 or higher (sorry, no warez links here)
7. Install and configure QPST along with its
requirements
8. Install/Configure
P2KCommander along with its requirements
9. the seems, icons, and files indicated in the sections of the WIKI which
I quote below...
10. RadioComm v10.3.1 (sorry, no warez links here). NOTE: some have
mentioned difficulties when using newer versions of Radiocomm
11. RadioComm v10.3.1 requires MS .Net Framework v2. (you can use windowsupdate.microsoft.com to download)
12. BitPim
13. WinRAR by Rarlab needed to unpack .RAR
files.
The process...
Discuss this process in -> Getting Alltel V3C/V3M/K1M Monster firmwares working: A more Automated Process
1. Backup the phone...
Prior to completing these backups your phone must be running the Verizon
Firmware... Active on your account and you have done a *228 opt 1, and *228 opt
2 on it, and the phone and all of its features must be completely working on
the VERIZON Firmware!! Failure to be in this state prior to starting
will mean FAILURE in the end.
After you do a *228 opt 1 & Opt 2 on the phone you wish
to convert... Activate a different phone on your account while flashing and
fixing your V3C/V3M/K1M phone...
Example...
I used VZW's My Account -> Activate phone, to switch to my V3C.. did *228 opt 1
& Opt 2... then used My Accont -> Activate, to switch back to my E815 while I
then flashed and worked with the V3C... When all the fixes were applied and
done... I switched back to the V3C being active on my account and tried it
out... NOTE: I did NOT do a *228 after I switched back.
I am not sure how crucial this is, but it is something I did EACH TIME I ran
through this process....
The one time I didn't.. and I left the V3C active the entire time... and when
trying VZW WAP, I got "authentication failed" and Get-it-Now could not read the
catalog... After about 3 hrs... data in EVDO mode started working again
For how to use Verizon's "on line ESN Swapper" to switch which
phone is active on your account.. Evade has a great illustrated write up, so
please see the ACTIVATE PHONE section of -> http://motorola.szczuka.org/Hollywood_VZW_Bell.html NOTE:
this will only work when switching between two EVDO phones...
NOTE: If you do NOT have another EVDO phone to activate on your account while
performing the rest of the tutorial, it has been suggested to please make use of
the Airplane Mode setting on the Alltel firmware once you've flashed... On
the phone... Menu -> Tools -> Air Plane Mode... set Airplane Mode = ON.
Then when you are complete with this tutorial, go back in and turn Airplane Mode
OFF.
NOTE: the Air Plane Mode trick doesn't always work... so another suggested
method is to leave the phone powered off after flash, then restore the seems
with RadioComm, the items with PST, and the QPST Service programming...
One that is done, you can power the phone back on. However, some of the
tools will not work with the phone off. See what luiset83 posted HERE for details.
OPTIONAL:
backup the file system... (Use BitPim to capture tree to zip file. Uncompress
ZIP on PC. go folder by folder comparing PC's copy to phone's file system view
in bitpim, make note of missing files/folders. Use P2KCommander and QPST to get
the rest.) You many not be able to backup All files/folders this way. This is not actually needed, but some like to do it, "just in
case"....
The following are MANDATORY:
You must now backup the settings, config files, etc... which WILL BE NEEDED to restore later...
NOTE: These files are essential to restoring your phone to
a working state! Do not proceed to flashing if you are unable to back up
ANY ONE of these items!
Use Qualcomm QPST to backup service programming..... Unplug your
phone from the PC, power it off, then back on, and re-connect it to the PC.
Use the QPST Configuration program, make sure your phone is
displayed/available... Select the port with your phone, then use the Start
Client pull down, select Service Programming. At the
phone selection screen, your phone should be listed and highlighted, click OK.
Click the READ FROM PHONE button. On the "Enter Service Programming Code"
screen, enter 000000 (or your phones SPC), and click OK. When the
read is complete, and you see values filled in, click the SAVE TO FILE button.
The file name box will automatically be filled in as your phone's ESN
number followed by _SP... (example: 1A3333Ad_SP) click the
Save button. Click on the Connection pull down in QPST Service
Programming, and click EXIT. Exit the QPST Configuration program.
Unplug the phone, power it off, then back on.
Use Motorola PST to backup additional files....
Unplug your phone from the PC, power it off, then back on, and re-connect it to
the PC. Start PST Phone Programmer. Use the File pull down,
and click on NEW. Select BREW File, and click OK. Use the Phone pull
down menu and click on READ. When the PST Phone Programmer Progress window
indicates the Read Procedure has completed successfully, (it says "It's now safe
to disconnect the phone"), close that progress
window. In the PST Phone Programmer window, use the File pull down
menu, and click SAVE AS... name the file, and click save...
Repeat the process using PST to backup each of the following... CDMA Enhanced Roaming Indicator (ERI) File, CDMA Preferred Roaming File, Feature File, Mobile IP File (NOTE: you might get an error stating this may or
may not be supported, click YES to continue, it will report Partially completed), MMS Data File, RTT Data File and RTT Browser File (NOTE: have Ver 6.x tab selected before you click READ FROM PHONE).
Repeat the process using PST to backup CDMA NAM File, but before you close the CDMA Nam file, please write down your Mobile Identification Number (MIN) and Mobile Directory Number (MDN) values. You will need these later in the guide. They can be found on Lines 3 & 4 of the NAM 1 Contents column.
NOTE: Not all of the PST backups will be used for this
process, but they are good to have "just in case..."
NOTE: You do not need to exit PST, or unplug/poweroff/poweron/replug
between READ operations.
Use RADIOCOMM to backup seems.... Download
this table -> MonsterSeems-1b.NVM.
(Right Click -> Save Target As... and make sure it doesn't end up getting
a .TXT appended to it)
Unplug your phone from the PC, power it off, then back on, and
re-connect it to the PC.
Start RadioComm.
If prompted about the Moto Driver Installation setup, click CANCEL. i.e. do NOT
run the Moto Driver Installation...
Inside RadioComm, use the Main pulldown menu. Select MA -> CDMA1X -> 6500
Chipset Base
Use the Settings pull down menu. Select USB -> M-Link USB Driver.
In the Main RadioComm window, click on the P2K 1 tab. The PC should "beep", and
you should see the Radio Detection change from a blue ciricle to a Green circle.
Use the Features pull down menu. Select NV/Seem.
In the TABLE box, click the OPEN button. Browse to the MonsterSeems.NVM file
you've downloaded, select it, and click OK.
In the Action box, click the READ button.
When the read has completed, in the Table box, click the SAVE button. File name
will default to your phone's ESN number. Example: A123455.
Close the seem window using the X in the upper right, then exit out of RadioComm.
Unplug the phone, press and hold the power button, the screen will blink. Then
turn the phone back on.
Note: you may have to remove/re-insert the
phone's battery to turn it back on.
That table file will backup EACH of the following seems...
Seem 04aa Bytes 7A Record 0001
Seem
038e Bytes 7A Record 0001
Seem
01d1 Bytes 7A Record 0001
Seem 29a0 Bytes 40 Record 0001
Seem 29c0 Bytes 7a Record 0001
Seem 2976 Bytes 40 Record 0001
Seem 2977 Bytes 40 Record 0001
Seem 2978 Bytes 40 Record 0001
Seem 2979 Bytes 40 Record 0001
Seem 2997 Bytes 20 Record 0001
Seem 299a Bytes 70 Record 0001
Seem 299b Bytes 70 Record 0001
Seem 29a1 Bytes 20 Record 0001
Seem 29a9 Bytes 40 Record 0001
Seem 29b2 Bytes 30 Record 0001
Seem 29b3 Bytes 30 Record 0001
Seem 29b6 Bytes 20 Record 0001
Seem 29ba Bytes 60 Record 0001
Seem 29bb Bytes 60 Record 0001
Seem 29bc Bytes 40 Record 0001
Seem 29be Bytes 90 Record 0001
Seem 29bd Bytes 90 Record 0001
Seem 29e9 bytes 82 Record 0001
Seem 01d2 bytes 7A Record 0001
Use BitPim to backup the following files..
/dmu/10.key
/nvm/seem/cdma_sec NOTE: K1M users may
not be able to back this file up... in that case, seem 01D2 contains this
data!
____________________________________
2. FLASH THE PHONE's FIRMWARE... (MV)
If you were unsuccessful backing up ANY of
the files in section 1, please STOP and DO NOT FLASH YOUR PHONE!!!
Obtain the Alltel Monster for your phone from -> http://www.humpa.com/vzw or http://ryfiles.com/flash
Please see the -> HOW TO FLASH <- page
for the latest updates/notes and FULL information.
Please do NOT do a *228 when you have the Alltel firmware on your phone.
NOTE: If you do NOT have another EVDO phone to activate on your account while
performing the rest of the tutorial, it has been suggested to please make use of
the Airplane Mode setting on the Alltel firmware... On the phone... Menu
-> Tools -> Air Plane Mode... set Airplane Mode = ON.
____________________________________
3. Restore the backups you created earlier...
NOTE: Please now manually backup your
ALLTEL 2742 bytes 0000 record 1 seem using P2kSeem before you proceed!!!
3a.Use Qualcom QPST to Restore service programming.....
Unplug your phone from the PC, power it off, then back on, and re-connect it to
the PC. Use the QPST Configuration program, make sure your phone is
displayed/available... Select the port with your phone, then use the Start
Client pull down, select Service Programming. At the
phone selection screen, your phone should be listed and highlighted, click OK.
Click the LOAD FROM FILE button. Navigate, find and select your ESN#_SP.QCN
file you created earlier. Click OPEN. Click the WRITE TO PHONE
button. On the "Enter Service Programming Code" screen, enter
000000 (or your phones SPC), and click OK. When the write is
complete, click on the Connection pull down in QPST Service Programming, and
click EXIT. Exit the QPST Configuration program.
Unplug your phone from the PC, power it off, then back on, and
re-connect it to the PC.
3b. Use Motorola PST to Restore additional files.... Start PST Phone Programmer. Use the File pull down, and click on
OPEN. Select BREW File, and click OK. Browse for, and select
your previously backed up file. Use the Phone pull down menu
and click on WRITE. When the PST Phone Programmer Progress window indicates
the WRITE Procedure has completed successfully (it
says "It's now safe to disconnect the phone"), close that progress window.
Repeat the process using PST to restore each of the following
that you backed up earlier... CDMA ERI File, MMS Data File (NOTE: Prior to writing, please change the "Album Upload Address" field to 9995551212@pix.vtext.com, where 9995551212 = your 10digit phone number,
BEFORE your write to phone), and RTT Data File.
Note: RTT Browser File will be edited/restored in
a later step so do NOT do it now...
OPTIONAL PST RESTORES: Due to using QPST to
backup/restore the Service Programming, you should not need to restore the
following files at this time... CDMA NAM File, CDMA Preferred Roaming File, Feature File, and Mobile IP File (NOTE: you might get an error
stating this may or may not be supported, click YES to continue, it will report
Partially completed). If you experience problems... then restore
these files.
3c. Use RADIOCOMM to restore your seems.... NOTE:
this will write the 2742 Seem that was on your phone when the backup was run..
So, if you ran the backup while the VERIZON firmware was on your phone, it will
restore the Verizon 2742 seem to your phone... as such.. Please Stop now,
use P2KSeem for V710 to backup your ALLTEL 2742 seem file BEFORE you use
RadioComm to restore the seems.
3c1. NOTE: V3M/K1M for EVDO Data, you must do the following before
restoring.... (V3C users do not need to do this indented part!)
These steps are experimental and if successful, eliminate the need to do Section 7 below....
Earlier, you used RadioComm to backup, which created a
file name that
defaults to your phone's ESN number. Example: A123455.NVM
Before we restore that, V3M and Krzr k1m users should open the
A123455.NVM file in notepad... (works best with WORD WRAP turned off... Format->
Word Wrap, make sure unchecked)
Look for the line that starts with M_01D2,466,0,122,... and change it to M_01D2,466,1,122,...
Look for the line that starts with M_01d1,465,1,122,... and change it to M_01d1,465,2,122,...
Now you may continue.
Start RadioComm.
If prompted about the Moto Driver Installation setup, click CANCEL. i.e. do NOT
run the Moto Driver Installation...
Inside RadioComm, use the Main pulldown menu. Select MA -> CDMA1X -> 6500
Chipset Base
Use the Settings pull down menu. Select USB -> M-Link USB Driver.
In the Main RadioComm window, click on the P2K 1 tab. The PC should "beep", and
you should see the Radio Detection change from a blue ciricle to a Green circle.
Use the Features pull down menu. Select NV/Seem.
In the TABLE box, click the OPEN button. Browse to the ESN .NVM file that was
created in the backup steps (example: A123455.NVM) , select it, and click OK.
In the Action box, click the WRITE button.
When the WRITE has completed...
Close the seem window using the X in the upper right, then exit out of RadioComm.
Radiocomm leaves the phone in the correct mode for P2KSeem to
connect, so perform the following seem edits...
3d. NOTE: V3M/K1M Only: Use P2KSeem for V710 to edit the 01D0
seem, selects the second M.IP Profile.
Fill in Seem: 01d0, Bytes (h): 7A, Record: 1
Click Load from phone.
Find Offset: 00
Check the box for Bit: 0 which sets the Hex value of the offset to 01
Click Save to Phone.
3e. Use P2KSeem for V710 to restore your ALLTEL 2742 Seem.
Restore your Alltel 2742 Seem using P2kSeem for V710, and perform the following
edits...
MANDATORY:
Offset 006F bit 1 - checked, to allow VZ Navigator GPS to function.
Offset
0052, bit 2 unchecked
Offset
005A, bit 7 checked to Enable editing the NVM files with QPST
Offset
0062, bit 2 & 5 checked to Enable MMS Message Delivery
Notification Menu, and
Enable editing of PIX servers
Offset
006A, bit 3 checked to Enable the Menu: Security > Data Connection
Offset
0073, bit 5 & 7 unchecked
Offset
0094, bit 7 unchecked
Offset 0023, bit 7 - checked, Enables Settings>Network>Set Mode>Scan A
Offset 0024, bit 0 - checked, Enables Settings>Network>Set Mode>Scan B
Offset 0024, bit 1 - checked, Enables Settings>Network>Set Mode>Automatic
Offset 0028, bit 2 - checked, Enables Settings>Network>Set Mode>Automatic A
Offset 0028, bit 3 - checked, Enables Settings>Network>Set Mode>Automatic B
Offset 002d, bit 0 - checked, Enables Settings>Network>Set Mode>Force Automatic
A
NOTE: default setting is Automatic B for VZW but that
choice is only there on the Alltel firmware after seem edit.
Optional:
Offset 003d, bit 1 - unchecked - Disable SMS Delivery confirmation
Offset
000C, Bit 1 = checked to "Enable scrolling through missed calls with flip
closed"
Offset
0038, bit 1, 2 & 3 checked to enable continental, classic, and
attention alerts or ring tones.
Offset
003B, bit 0 checked to enable Moon Lite Haze alert or ring tone
offset
004B, bit 0 checked to
change the GPS icon indicator to a CrossHair instead of Satelite
Offset
0074, bit 7 checked changes Digital indicator icon from D to
1X
Offset
007A, bit 1 unchecked to Switch left and right soft key choices
Offset
008D, bit 6 checked ... Adds "time and date" and "auto redial" menus to
settings>initial setup
Offset 001d, bit 3 Uncheck - Motorola Animation on Startup
Offset 0024, bit 2 Uncheck - Voice Mail on #1 speed dial
Offset 0031, bit 1 Uncheck - Motorola Animation on Shutdown - OFF
Offset 005f, bit 7 Check – Video Quality NOTE: this setting has no
use, as the video quality defaults set to HIGH
My PRE-EDITED ALLTEL V3C 2742 Seem (contains all the above edits
except ring tones, and Moto Animation) -> 2742_0001-EDITED-NoRingTonesAdded.seem
____________________________________
4. Overwrite files... Enable GIN appmgr, Change the GIN icons, and
load custom MMA_UCP/MMA_DCP files, vCast fixes, etc.
NOTE: P2KCommmander was not intended to be used on CDMA phones,
as such it can be unstable. It is suggest you exit ALL programs on your PC.
Shut Everything down that you can. Things like Messengers (Gtalk for
example), and other "helper" type applications (even "extra" mouse
control panels, etc) can cause P2KCommander to hang
while running these scripts!!! Right click on anything in your system
tray... if you can EXIT it, do exit!! Disable your screen saver, do NOT
let any other program steal focus!! do NOT use your mouse, etc...
Download the appropriate ZIP file for your phone from the following....
V3C_SystemFiles.zip
V3M_SystemFiles.zip
Krzr_SystemFiles.zip
Unzip the file onto your PC. Start either
PST or MSU to get your phone into the proper mode. Use the include
.P2KC script files (just double click on them) one at a time to install/update the appropriate files.
(I am listing the files the files installed by each script here, so if the script hangs, you
can MANUALLY place them)...
system.p2kc
Installs the following files....
/a/motorola/system/alltel_axcess_mm_a_41x41_c.gif
/a/motorola/system/alltel_axcess_mm_s_33x33_c.gif
/a/motorola/system/alltel_axcess_mm_s_15x15_c.gif
/a/motorola/system/mma_ucp
/a/motorola/system/mma_dcp
/a/brew/mod/brewappmgr/alltelappmgr.bar
/a/dmu/10.key
NOTE: Originally the 12513.p2kc and 13478.p2kc files were used to restore the vCast
Video icon. Since then, a free vCast update has become available in the
Get-it-Now catalog... under... Get Going -> Featured Apps -> VCast.
Please download this FREE update instead!! However, if you are on a NationWide plan, acceessing GIN and downloading apps will cost $1.99 per MB unless you have the $15 Vcast Vpack!!!
V3C users should now see this update. Please use this FREE update to install Vcast instead of the following P2KC scripts!!
Using the following scripts may get you the vCast Video icon back, BUT the
application may not have working sound. So it is suggested to download the
vCast Update from the Get-it-Now catalog instead!! Again, this will cost users on NationWide plans $1.99 per MB.
12513.p2kc <- Not needed if you download the vCast
update from GIN
Installs the following files...
/a/brew/mod/12513/catalog.bar
/a/brew/mod/12513/verizonmediaplayer.mod
/a/brew/mod/12513/verizonmediaplayer.sig
/a/brew/mod/12513/vzwresource.bar
/a/brew_preloads/12513.mif
13478.p2kc <- Not needed if you download the vCast update from GIN
Installs the following files...
/a/brew_preloads/13478.mif
/a/brew/mod/13478/mediaasf.mod
/a/brew/mod/13478/mediaasf.sig
Exit the PC software (PST or MSU), unplug the phone, power the
phone off/on...
____________________________________
5.
Edit and restore RTT Browser file.
When using the default Verizon config files, you need to
create a new Web Session on your phone to handle the MMS/PIX Messaging,
you may also need to edit the USER ID field of the default VZW web
session.
If you are using backups from an
already 100 % working Alltel flashed phone, these settings may be
configured properly so do these steps just to VERIFY... However, when using backups from Verizon firmware, these steps are
Mandatory!!
Unplug your phone from
the PC, power it off, then back on, and re-connect it to the PC.
Start PST Phone Programmer. Use the File pull down,
and click on OPEN. Select RTT 1x-Browser, and click OK. Browse for, and select your previously
backed up file.
Click on the Version 6.x tab.
On the Proxy 1 tab, change the User ID from %m to 9995551212, where
9995551212 is your Phone Number. Note: Some have had to use their 10digit MDN or 10digit MIN as written down earlier in section 1. (NOTE: this is a step I have not had to do, but others have.)
Leave the other fields untouched.
Click -> SAMPLE
SCREEN SHOT (Proxy 1)
Click on the Proxy 2 tab.
Configure the fields as follows...
Proxy Name: VZW_MMS
Homepage: http://homepage
User ID: 9995551212 (where 9995551212 is your 10 digit phone number)
Password: vzw
Under the Primary section...
Gateway: mms.vtext.com
Port: 80
Leave the other fields untouched.
Click -> SAMPLE
SCREEN SHOT (Proxy 2)
If you have a Personal "free" WAP proxy, you may click on the Proxy 3
tab, and enter the appropriate fields to configure that web session now.
When you have finished, use the Phone
pull down menu and click on WRITE. When the PST Phone Programmer
Progress window indicates the WRITE Procedure has completed successfully
(it says "It's now safe to disconnect the phone"), close
that progress window. Exit PST. Disconnect the phone from the PC.
On the phone... Go Menu -> Messages
-> press Options soft key. From the list, select Inbox Setup. Select MMS Message Setup.
Highlight Server Info, and press the Change soft key. On the Current Server
screen, press the Option soft key. On the Server Info screen,
select EDIT. Verify the Server Name and Web Session Name match VZW values.
Service Name = VZW, Server Name = http://mms.vtext.com/servlets/mms, Web Session = VZW_MMS.
(The following, copied directly from the Alltel V3C Wiki, may already be done due to the use of PST/QPST/RadioComm,
but Please verify these are set properly..)
Now go to Main Menu / Settings / Security / Data Connections/ password is
000000/ 1xRTT Data. Verify that the following are set... If they are
not, then change them....
User Name : XXXXXXXXXX@vzw3g.com (XXX=your TN)
Note: After you hit OK the phone might report… “Notify ALLTEL of change”
just disregard !
Password : vzw
hit done
____________________________________
6. Change the phone's Default network mode.
By default, the Alltel firmware may not have a selection made for "Network ->
Set Mode" however, Verizon's default is AutoMatic B.
On the phone go Menu -> Settings -> Network -> Set Mode... and make sure
Automatic B is selected.
NOTE: to have the choice for Automatic B in the menu, you must have done the
MANDATORY 2742 seem edits in section 3.
NOTE: due to the use of QPST and the various PST backups, this option may be
correctly set, BUT you do want to verify this!
____________________________________
7. V3M and K1M users, fix EVDO Data (thanks jlbrightbill)
NOTE: if you Edited the RADIOCOMM backup file before
restoring (as listed in section 3c1 above)... and your data (mms, get-it-now, wap, etc)
works in EVDO mode, you can skip this section.
NOTE: Earlier, you used RadioComm to backup, which created a
file name that
defaults to your phone's ESN number. Example: A123455.NVM. That backup
file contains a copy of your 01D2 seem... While its not explicitly spelled out
in the guide, the strings are just located in a slightly different spot... So
open up your 01D2 seem (or the NVM Backup made by Radiocom with notepad), and
you will see the same pattern as depicted in the the two SCREEN SHOTS included
in part 1 below (0110 to start, 10 in between)... so you can grab the strings
from there when you are doing the following steps.
Open QPST's
Service Programming and load values from phone. Scroll to the M.IP tab,
and select "Add". Configure the new profile as the screenshots indicate. mip1ki4.png and mip2bc6.png.
NOTE: tethered NAI won't stay, but it won't
affect the data fixes.
The following has been slightly re-worked to fit the flow of this
guide... i.e. the mentions of files that you need to backup while still on the
VERIZON Firmware have been removed from this section, but added to the backup
section in the beginning, and file links moved "in-line" so there is not a
problem with the rapid share links going away...
NOTE: if you can't get the nvm/cdma_sec backed up, you
can use your backed up Seem 01d2.
From jlbrightbill -> http://www.howardforums.com/showpost.php?p=8511617&postcount=346
NOTE #2: Many reports have said this
guide only results in working data after doing using the ESN changer to
reprovision data OR calling CS to get it reprovisioned that way. Once data is
working completely over 1X, move on to this next step.
1. Open your backup of cdma_sec in a hex editor, I personally use Hex Workshop,
but Winhex or others will work as well. Use the instructions contained in these
two images to copy your HA Shared Secret and AAA Shared Secret keys.
hasharedsecretme6.png
aaasharedsecretse5.png
Of course on your particular backup the string won't be all A's and all B's, I
used them to clearly point out exactly what you're looking for.
2. Open QPST's Service Programming and select "Load from Phone"
3. Move to the MIP tab, and select the User Profile that contains
your10digit#@vzw3g.com, then hit Edit
3. Select "Enter hex value" on both HA Shared Secret and AAA Shared Secret.
4. Paste the two strings you copied before into the proper location, hit OK,
then write to phone. Once these are written the two fields will switch back to
"Retain last value" if you read from phone again, but the strings will be
written to cdma_sec so "Retain last value" means it will use them.
5. Copy 10.key
to /DMU/
EVDO data should work now.
____________________________________
8. Re-Activate the phone on your account.
Use Verizon's My Account -> Activate phone, to
switch back to your Razr/Krzr. DO NOT Do a *228 like the web page
says!!
For how to use Verizon's "on line ESN Swapper" to switch which
phone is active on your account.. Evade has a great illustrated write up, so
please see the ACTIVATE PHONE section of -> http://motorola.szczuka.org/Hollywood_VZW_Bell.html NOTE:
this will only work when switching between two EVDO phones... DO NOT
PERFORM A *228!!
If you choose to
make use of the Airplane Mode setting on the Alltel firmware once you've
flashed, go back in and turn it OFF... On the phone... Menu -> Tools ->
Air Plane Mode... set Airplane Mode = OFF.
9. Fix Seem 275B...
If you do a Master Reset, the 275A seem will get re-written with the PRE-EDITED values, All edits you made willbe lost. To prevent this, any seem edits you've performed on the 275A seem must be done to the 275B seem as well.
____________________________________
Discuss this in -> Getting Alltel V3C/V3M/K1M Monster firmwares working: A more Automated Process
____________________________________
My Final Notes....
Now that everything is working, Please create new QPST, PST,
RadioComm backup files (as outlined earlier)... They can be re-used on
your phone to restore FULL Functionality of the Alltel firmware! (i.e. now
the backups are done in a WORKING STATE, the restore process will put everything
back, Web Sessions, MMS configuration and all!!)
There is still discussion as to whether *228 will corrupted
data services when using the Alltel MONSTER firmwares. So it is up to
you.. Take a chance updating your PRL by using *228 opt 2 , or just manually
update using PST from now on.
For those having problems...
Please be sure you are READING EVERY WORD OF THE GUIDE CAREFULLY... Even the
fine print, colored, bold, italic prints...
DO NOT SKIM THE GUIDE AND ASSUME!!!!!!!
Some things that are apparently causing the most problems, which are not in the
guide because they are "understood"....
1. This guide is NOT PERFECT.. and Human Error will always be a factor...
2. This is NOT a guide for noobies... it is not 100% word-for-word, or can be
followed if you've never "hacked" a phone before type of guide...
3. reading MMS file with PST fails with message "Feature Not Supported"... Why
is this not documented in the guide? Well, the Pre-Req's say you need PST v7.25,
people getting this message are using 7.23 and lower!!! i.e. they are NOT
READING and following what the pre-req's are!!! If Pst 7.23 worked, it would be
listed as the pre-req!! (just like how QPST v2.7 build 215 is listed, rather
than QPST v2.7 build 91)
4. /nvm/seem/cdma_sec may not be able to be backed up on K1M phones... BUT
section 3c1 mentions a way that can get around this, If it works, you don't need
to worry about the HA/AAA Shared Secret strings... if it doesn't work, section 7
does state that 01D2 seem contains these strings.... While its not explicitly
spelled out in the guide, the strings are just located in a slightly different
spot... open up your 01D2 seem (or the NVM Backup made by Radiocom with
notepad), and you will see the same pattern as depicted in the SCREEN SHOTS in
Section 7 (0110 to start, 10 in between)... so you can grab the strings from
there when you are doing section 7.
____________________________________
Customization suggestions...
Remove the Alltel Startup and Shut Down graphics...
Use BitPim (or P2KCommander) to delete the following files...
/motorola/shared/picture/customer_closing.gif
/motorola/shared/picture/customer_opening.gif
Note: or you can just overwrite these with others
Remove the startup/shutdown sounds (the default Moto
sounds may still play)
Use BitPim (or P2KCommander) to
delete the following files...
/motorola/system/ui_start_dn_mono.mp_
/motorola/system/ui_start_up_mono.mp_
Note: or you can just overwrite these with others
Set a custom graphic on the outer LCD when the flip is
open
Use BitPim (or P2KCommander) to place a 96x80 256 color
non-animated Gif89 graphic called verizon.gif in the /mobile folder... as...
/mobile/verizon.gif
and write this Pre-Edited 2771,
record 1, 30 bytes (h) seem.. and restart the phone.
For additional info...
see also the discussion in -> Hosed Your V3c Outside LCD Logo? I HAVE A FIX!!!!
Add additional Skins
Download a CDMA Moto UI V3C skin like -> V3C-WM5.zip
unzip, and use P2KCommander either via the included P2KC script,
or manually use P2KCommander to create the folder under /mobile and
copy all the files to it.
Then Restart the phone (power off/on).
Removing Skins
Always use BitPim to remove additional skin files and folders, then restart the
phone.
P2kcommander can remove the files, but it will not show you the empty
folders, and those empty folders will still show as a skin choice.
Changing VERIZON WIRELESS on the internal LCD.
Unplug your phone from the PC, power it off, then back on, and re-connect it to
the PC. Start PST Phone Programmer. Use the File pull down, and click on NEW.
Select CDMA Enhanced Roaming Indicator (ERI) File, and click OK. Use the
Phone pull down menu and click on READ. When the PST Phone Programmer Progress
window indicates the Read Procedure has completed successfully, (it says "It's
now safe to disconnect the phone"), close that progress window...
In the Roaming Indicator Table section... Lines 1 & 2, change the Text Displayed
from VERIZON WIRELESS to anything you want displayed (up to 18 characters).
Note: click on the word Verizon for the cursor to appear in the text box.
Use the Phone pull down menu and click on WRITE. When the PST Phone Programmer
Progress window indicates the WRITE Procedure has completed successfully (it
says "It's now safe to disconnect the phone"), close that progress window.
Use the Phone Pull down menu and click Restart. When the PST Phone Programmer
Progress window indicates the Restart Procedure has completed successfully (it
says "It's now safe to disconnect the phone"), close that progress window, and
exit PST.
|