• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Root root,s-off,simunlock,superCID htc merge

ok. since you have no main version,try to run this ruu:
Shipped ROMs

make sure the gold card is in the phone,then run the utility on the PC as administrator,if possible with your version of windows. when prompted to plug in the phone,power on into hboot,then select fastboot from the hboot menu,then plug in.

hopefully the utility will flash,wich will get you back to a working phone,with cell south software.


It did not work - the program gives an error 131
 
Hey Scotty. Got my phone flashed and rooted but having some issues with the radio. I do not recall the fastboot saying it was flashed. I notice that the stock ruu for ntelos is no longer on the server as well. I have a full image of my stock firmware which should have any and all partitions on the device (~60 if I recall). Anywho this is what I have done up to this point.

Flashed to the nTelos custom ruu rom
-> Deleted apns, reloaded APNs from a co-workers phone same phone, not rooted.
-> dialed ##3282# and changed all the settings to match
-> Restarted
-> Dialed *228 and allowed ota update
-> re-dd'd the misc-stock (I actually dd'd my whole block device and ripped that partition out. MD5 Matches the misc-stock.img from the custom zip.)
-> Toggled airplane mode as well as mobile data.
-> Restarted countless time
-> *228 some more

Still no data :(.

log shows I get connection but it is promptly disconnected

Code:
W/CarrierLabel( 1542): updateNetworkNameExt: mSimState = UNKNOWN
I/TelephonyRegistry( 1468): notifyServiceState: 0 home nTelos nTelos 31000  1 EvDo rev. 0 CSS supported 30 4178RoamInd: 128DefRoamInd: 0EriInd: 1EriMode: 0RadioPowerSv: falseEmergOnly: false
V/CarrierLabel( 1542): Cdma ROAMING_INDICATOR_OFF, removing ERI icon
D/StatusBarPolicy( 1542): hasService()=true ,mDataState=1 ,mPhone.htcModemLinkOn()=false ,mDataActivity=0
I/ActivityManager( 1468): No longer want com.google.android.googlequicksearchbox (pid 2161): hidden #16
I/TelephonyRegistry( 1468): notifyDataConnection: state=1 isDataConnectivityPossible=true reason=null interfaceName=null networkType=5
D/TelephonyRegistry( 1468): notifyDataConnection() state=1isDataConnectivityPossible()true, reason=null
D/TelephonyRegistry( 1468): broadcastDataConnectionStateChanged()  state=CONNECTINGtypes=default,supl, interfaceName=null, apn=null
D/HtcCdmaStatusBar( 1542): return sDataNetType_3g_cdma
W/CarrierLabel( 1542): updateNetworkNameExt: mSimState = UNKNOWN
V/CarrierLabel( 1542): Cdma ROAMING_INDICATOR_OFF, removing ERI icon
I/TelephonyRegistry( 1468): notifyServiceState: 0 home nTelos nTelos 31000  1 EvDo rev. A CSS supported 30 4178RoamInd: 128DefRoamInd: 0EriInd: 1EriMode: 0RadioPowerSv: falseEmergOnly: false
I/TelephonyRegistry( 1468): notifyDataConnection: state=0 isDataConnectivityPossible=true reason=null interfaceName=null networkType=6
D/TelephonyRegistry( 1468): notifyDataConnection() state=0isDataConnectivityPossible()true, reason=null
D/TelephonyRegistry( 1468): broadcastDataConnectionStateChanged()  state=DISCONNECTEDtypes=default,supl, interfaceName=null, apn=null
D/HtcCdmaStatusBar( 1542): return sDataNetType_3g_cdma
D/ConnectivityService( 1468): [embedded] ConnectivityChange for mobile: DISCONNECTED/DISCONNECTED, default=-1
W/CarrierLabel( 1542): updateNetworkNameExt: mSimState = UNKNOWN
I/TelephonyRegistry( 1468): notifyServiceState: 0 home nTelos nTelos 31000  1 1xRTT CSS supported 30 4178RoamInd: 128DefRoamInd: 0EriInd: 1EriMode: 0RadioPowerSv: falseEmergOnly: false
V/CarrierLabel( 1542): Cdma ROAMING_INDICATOR_OFF, removing ERI icon
I/TelephonyRegistry( 1468): notifyDataConnection: state=0 isDataConnectivityPossible=true reason=null interfaceName=null networkType=7
D/TelephonyRegistry( 1468): notifyDataConnection() state=0isDataConnectivityPossible()true, reason=null
D/TelephonyRegistry( 1468): broadcastDataConnectionStateChanged()  state=DISCONNECTEDtypes=default,supl, interfaceName=null, apn=null
It seems that whenever it tries to get a connection the entire radio shuts down, eg. I have no signal where as if I don't try a connection I have 4 bars. The only time I have seen this before was prior to rooting when I tried to use USB tethering.

**EDIT**
Just wanted to add in this.
I have followed this path for flashing. After each has failed to get 3g as per above I went to the next.

VZN-Leaked -> nTelos Custom -> Open Mobile Custom -> Open Mobile Stock -> nTelos Custom

**EDIT 2**
LEXIKON XB SHIP S-OFF
HBOOT-0.88.0000
RADIO-1.08.00.0524_3
eMMC-boot
Dec 2 2010,16:07:41
 
Hey Scotty. Got my phone flashed and rooted but having some issues with the radio. I do not recall the fastboot saying it was flashed. I notice that the stock ruu for ntelos is no longer on the server as well. I have a full image of my stock firmware which should have any and all partitions on the device (~60 if I recall). Anywho this is what I have done up to this point.

Flashed to the nTelos custom ruu rom
-> Deleted apns, reloaded APNs from a co-workers phone same phone, not rooted.
-> dialed ##3282# and changed all the settings to match
-> Restarted
-> Dialed *228 and allowed ota update
-> re-dd'd the misc-stock (I actually dd'd my whole block device and ripped that partition out. MD5 Matches the misc-stock.img from the custom zip.)
-> Toggled airplane mode as well as mobile data.
-> Restarted countless time
-> *228 some more

Still no data :(.

log shows I get connection but it is promptly disconnected

Code:
W/CarrierLabel( 1542): updateNetworkNameExt: mSimState = UNKNOWN
I/TelephonyRegistry( 1468): notifyServiceState: 0 home nTelos nTelos 31000  1 EvDo rev. 0 CSS supported 30 4178RoamInd: 128DefRoamInd: 0EriInd: 1EriMode: 0RadioPowerSv: falseEmergOnly: false
V/CarrierLabel( 1542): Cdma ROAMING_INDICATOR_OFF, removing ERI icon
D/StatusBarPolicy( 1542): hasService()=true ,mDataState=1 ,mPhone.htcModemLinkOn()=false ,mDataActivity=0
I/ActivityManager( 1468): No longer want com.google.android.googlequicksearchbox (pid 2161): hidden #16
I/TelephonyRegistry( 1468): notifyDataConnection: state=1 isDataConnectivityPossible=true reason=null interfaceName=null networkType=5
D/TelephonyRegistry( 1468): notifyDataConnection() state=1isDataConnectivityPossible()true, reason=null
D/TelephonyRegistry( 1468): broadcastDataConnectionStateChanged()  state=CONNECTINGtypes=default,supl, interfaceName=null, apn=null
D/HtcCdmaStatusBar( 1542): return sDataNetType_3g_cdma
W/CarrierLabel( 1542): updateNetworkNameExt: mSimState = UNKNOWN
V/CarrierLabel( 1542): Cdma ROAMING_INDICATOR_OFF, removing ERI icon
I/TelephonyRegistry( 1468): notifyServiceState: 0 home nTelos nTelos 31000  1 EvDo rev. A CSS supported 30 4178RoamInd: 128DefRoamInd: 0EriInd: 1EriMode: 0RadioPowerSv: falseEmergOnly: false
I/TelephonyRegistry( 1468): notifyDataConnection: state=0 isDataConnectivityPossible=true reason=null interfaceName=null networkType=6
D/TelephonyRegistry( 1468): notifyDataConnection() state=0isDataConnectivityPossible()true, reason=null
D/TelephonyRegistry( 1468): broadcastDataConnectionStateChanged()  state=DISCONNECTEDtypes=default,supl, interfaceName=null, apn=null
D/HtcCdmaStatusBar( 1542): return sDataNetType_3g_cdma
D/ConnectivityService( 1468): [embedded] ConnectivityChange for mobile: DISCONNECTED/DISCONNECTED, default=-1
W/CarrierLabel( 1542): updateNetworkNameExt: mSimState = UNKNOWN
I/TelephonyRegistry( 1468): notifyServiceState: 0 home nTelos nTelos 31000  1 1xRTT CSS supported 30 4178RoamInd: 128DefRoamInd: 0EriInd: 1EriMode: 0RadioPowerSv: falseEmergOnly: false
V/CarrierLabel( 1542): Cdma ROAMING_INDICATOR_OFF, removing ERI icon
I/TelephonyRegistry( 1468): notifyDataConnection: state=0 isDataConnectivityPossible=true reason=null interfaceName=null networkType=7
D/TelephonyRegistry( 1468): notifyDataConnection() state=0isDataConnectivityPossible()true, reason=null
D/TelephonyRegistry( 1468): broadcastDataConnectionStateChanged()  state=DISCONNECTEDtypes=default,supl, interfaceName=null, apn=null
It seems that whenever it tries to get a connection the entire radio shuts down, eg. I have no signal where as if I don't try a connection I have 4 bars. The only time I have seen this before was prior to rooting when I tried to use USB tethering.

**EDIT**
Just wanted to add in this.
I have followed this path for flashing. After each has failed to get 3g as per above I went to the next.

VZN-Leaked -> nTelos Custom -> Open Mobile Custom -> Open Mobile Stock -> nTelos Custom

**EDIT 2**
LEXIKON XB SHIP S-OFF
HBOOT-0.88.0000
RADIO-1.08.00.0524_3
eMMC-boot
Dec 2 2010,16:07:41

what network was your merge on,and what are you trying to use it on?
 
I am on nTelos and flashed to the nTelos custom. I have no data at all but I do have sms and voice. If I turn on wifi I can access web and such but without it I cant do squat.
 
I copied the APNs from a co-worker with an identical phone. Their phone had 3504 apns as well.

based on discussions had earlier in the thread,it seems there may be something in the phone keeping it from accepting new APNs when in cdma mode :mad:

i tried a couple of things,and tried to help figure it out,but no one really stayed with it to try and help. ive only used my merge on vzw and on t mobile,where adding APNs is no prollem,so i havent been able to duplicate the situation on my own device to find a solution. when i used it on vzw data was fine,no matter what ruu i ran,and same for t mobile after manually entering apns.
 
I may hit up my support guy (were on a business contract). Also which partition is the recovery image on? I will check to see if there's any setup scripts in there.

Would a full logcat help you at all?
 
I may hit up my support guy (were on a business contract). Also which partition is the recovery image on? I will check to see if there's any setup scripts in there.

Would a full logcat help you at all?

sounds good. i think recovery is mmcblk0p21. my merge isnt near me at the moment,you could confirm with

adb shell
cat /proc/emmc

let us know if you find anything interesting :)
 
Do you foresee any major complications by using dd to flash the original firmware I pulled back over the current mmc block?

I want to confirm beyond a doubt its not software related. If it is software related its a matter of generating a list of all the files and md5s and figure out what is different.

What do you think?
 
Do you foresee any major complications by using dd to flash the original firmware I pulled back over the current mmc block?

I want to confirm beyond a doubt its not software related. If it is software related its a matter of generating a list of all the files and md5s and figure out what is different.

What do you think?

i dont see any complications,id prolly go so far to say that is the likely solution. :eek:

i think the partition that contains APNs is destroyed during the downgrade process,and we have not found a way to get it back. seems restoring with apn backup for some reason does not "stick".. at least not that we know of i had tried modifing some apn files,but i dont recall how may folks actually tested it.

if you happend to have pulled the partition housing the apn settings during your initial pull,dd'ing it back should get it working again. we just need to figure out what partition this is. if i can find some time ill fire up my merge and see if i can dump some partitions and help you look.

defaintely looking fwd to hearing if you have any luck :)
 
Been busy with work for the past few weeks. Working on this again today.

Here are the partitions I see on my device:


# cat /proc/partitions
major minor #blocks name

179 0 2142208 mmcblk0
179 1 500 mmcblk0p1
179 2 64 mmcblk0p2
179 3 4500 mmcblk0p3
179 4 1 mmcblk0p4
179 5 30000 mmcblk0p5
179 6 12500 mmcblk0p6
179 7 2048 mmcblk0p7
179 8 3072 mmcblk0p8
179 9 2048 mmcblk0p9
179 10 1024 mmcblk0p10
179 11 1024 mmcblk0p11
179 12 8751 mmcblk0p12
179 13 4096 mmcblk0p13
179 14 4096 mmcblk0p14
179 15 1024 mmcblk0p15
179 16 6909 mmcblk0p16
179 17 256 mmcblk0p17
179 18 1024 mmcblk0p18
179 19 1024 mmcblk0p19
179 20 1280 mmcblk0p20
179 21 8701 mmcblk0p21 - Recovery?
179 22 4096 mmcblk0p22
179 23 256 mmcblk0p23
179 24 256 mmcblk0p24
179 25 524030 mmcblk0p25 - System
179 26 1217232 mmcblk0p26 - Data
179 27 255999 mmcblk0p27 - Cache
179 28 1280 mmcblk0p28
179 29 20480 mmcblk0p29 - Log


**********************************
Update
**********************************

Using rsync I copied back the contents of the data partition minus some extra apps ... did not help.

I also checked the system partition and none of the previously existing files were any different.

I will be flashing back the recovery partition today and seeing if a factory reset fixes it, if not then I will be continuing tomorrow.
 
not much more to add to that,other than confirm p21 is recovery,and boot is 22. i do know that CID,radio secureflag,and maybe simlock(when its present. sim card does not seem to be locked on lexikon models). not 100% sure on the simlock... it could be somewhere else.


Code:
C:\Users\Scott>[COLOR="Red"]adb shell[/COLOR]
/ # [COLOR="red"]cat /proc/emmc[/COLOR]
cat /proc/emmc
dev:        size     erasesize name
mmcblk0p17: 00040000 00000200 "misc"
mmcblk0p21: 0087f400 00000200 "recovery"
mmcblk0p22: 00400000 00000200 "boot"
mmcblk0p25: 1ffbfa00 00000200 "system"
mmcblk0p28: 00140200 00000200 "local"
mmcblk0p27: 0f9ffe00 00000200 "cache"
mmcblk0p26: 4a4b4200 00000200 "userdata"
mmcblk0p29: 01400000 00000200 "devlog"
/ #

have you opened any of the partitions with a hex editor and looked for APNs? ive no idea if wed be able to read them on the right side of the hex editor,like some other info.

i feel like cdma APNs are stored somewhere,tho ive no idea if well be able to read/find them.
 
I will attempt this tomorrow. dding the full image back to the block device only rebooted it after the first block was written. :mad:

I will look into the partitions for apns. In the mean time I went ahead and wrote a script to dd out each partition into its own file on the sdcard. Then I copied it back to my laptop.
 
Wanted to make sure that some of the older information is still accurate.. Thanks in advance..


Hello :) ok, so I'm totally not a stalker, lol but I followed Scotty over here from xda, as he seems to have the most recent information posted about rooting the HTC Merge/Lexikon.Actually, I've been looking for a way to resolve my issue one and off for a year and I am just now finding little bits and pieces of guides and whatnot, but they are all either A.)Written by someone who no longer participates and/or B) their links are all broken. Before I go through the process, I want to confirm a few things so I don't do all of this for nothing..It is my mom's old phone. I want to be able to use my prepaid TMobile Sim Card..Thought maybe I could get around this without having to do the whole process, cuz when I put the SIM card it, it switches to global mode, recognizes SIM card.. So I thought maybe by now, (since most of the only posts I found were 2011/12) there was a different way to accomplish this.. Just for background, I'm not a complete noob, but I do tend to ask lots of questions when I'm learning something.. I have rooted my current TMobile Concord (also a VERY hard phone to find info on.. ) and all of my ASUS tablets... I can follow your guide, but would appreciate any help on things I may get hung up on..
So I guess my actual question is "How Do I make my US Cell/Verizon HTC merge work on my TMobile account?"
Do I have to root or is there a work around that someone has figured out out since the older posts?


Phone info below, would be grateful for any

HTC Merge ADR6325 (US Celluar/VZ)
Droid 2.3.4
HTC Sense 2.1
BUILD Number 3.10.573.2 --CL141744 release keys
Software Number 3.10.573.2
Kernel version 2.6.35.10-gd699855


And right now under Network it says:
Operator Name: US Cellular
Signal Strength -91dBm
Mobile Network Type- CDMA- 1xRTT
Service State - In Service
Roaming -Not Roaming

( Also, Keeping in mind that this phone has options for GSM/UMTS,Global, and CDMA.. I played around with them for awhile, seeing if just putting my SIM card in would pick it up.. But it almost immediately pops up and asks to switch to Global Mode.. So under Mobile Network Settings it says that Global Mode is the preferred mode, etc etc..)

So, thanks so much for taking the time to read this.. If there is somewhere that you can point me or any information you can offer to help would be great.

-K
 
im being hollered at to run some errands, but i will be back to give you some input.

in a nutshell,the merges seem to be all different as to what one needs to do to make them work on gsm. some work fine with no mods,some never do :eek: when you get one working,sometimes APNs can be difficult to make "stick"

you shouldnt really need to root,to use the phone on a gsm network,but some devices may require s off and supercid in order to get it to work.

the guide all is current,and rest assured we will support it still with any questions you have :)
 
well, its absolutely the weirdest phone i have ever worked with... so to update, I have the SIM in the merge and when someone calls my phone, they immediately get my voicemail (obviously), but the *I* get a new voicemail notification... ? so i feel like it's just one tiny thing somewhere i need to change.. apns or something? i don't know anything about those tho, lol, always been somewhere where they just popped up i guess.. i'm in the mountains visiting my parents in va.. so likely not to be good service area anywas.. also, would doing something like just updating the firmware be beneficial at all? i will play around with the s off and superCid.. thanks for getting back to me so quickly, this thing is making me crazy.. :)
 
Took my dogs for a walk and the "Limited Service" icon popped up and
it had the 3G at the top, for literally like 1 second.. haven't been able to get it to that again, but at least now I know that we are close! Can't call, can't text.. As soon as I switch it over to GSM, that's when I get the voicemail notification and limited service pop up.. When I looked at
GSM Options and Network Operators then
Search Networks or Select Automatically,
it eventually just times out because it cannot connect/find one.
As far as APNS go, I'm clueless about those little suckers..
It says:
TMobile Data
TMobile MMS (verifies that the SIM is being recognized..)
but I don't know what values should be entered..
(Could I put the SIM back in original phone, go to APNs, copy all of the working values down, replace SIM back in Merge, and enter them there?)

I feel like there's just something small I am missing.. So close, yet so far away!! :):)
 
is your software build number actually 3.20.573.2? also,may want to edit your post above and remove your device serial number. meids and esns are definately not the kind of info you want certain types of folks to have :eek:

the merge is definately a strange device. my merge used to work fine on gsm(also prepaid t mobile) but when i turned it on just now,nothing. :confused:

some seem to work fine,without modification. some seem to need an older vzw radio installed in order for gsm to work. some stubbornly refuse to work on a gsm network no matter what.

the APNs are not affecting you at this point. they are what makes the data and mms work,and we need for the phone to make calls and regular texts first.

since your phone isnt recognizing the network,yet isnt asking for an unlock code,then the next step is to install the older vzw radio. i ran the whole leaked ruu on mine,and now its working fine again on t mobile.

continue on with the guide. unfortunately,your personal data will be lost during this process,so sync everything you can with google first.

when you finish the guide,do NOT install an upgrade ruu. just stay on the downgrade firmware,and try again to get your t mobile sim to work. we want to get everything working prior to doing any kind of upgrade. :)

dial *#*#4636#*#* and then,phone info. select GSM auto(prl) from the perfered network menu. back out of the menu,and give the phone a few minutes to get a gsm signal.

once you can make calls and texts,well get the APNs entered so your data works also.
 
Back
Top Bottom