• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Root Well, lets get the ball rolling

kwknott said:
Has anyone had luck pulling spc code? I've tried cdma workshop and an opensource cdma type program I found and no luck on either. Both will connect via com port but when trying to read spc cdma workshop reports phone won't answer and the other tool locks up.
Click to expand...

I was able to read the spc with cdma ws, and change it. And when lgnpst asked for it, the spc I wrote to it unlocked the phone, and the phone also took the spc when I dialed ##3424#. Sometimes I'll get lucky and it will let me press the pound key more than once without going to the menu.
 
Hashtag said:
I was able to read the spc with cdma ws, and change it. And when lgnpst asked for it, the spc I wrote to it unlocked the phone, and the phone also took the spc when I dialed ##3424#. Sometimes I'll get lucky and it will let me press the pound key more than once without going to the menu.
Click to expand...

Wait when did you read the spc, befoe or after the flash? And how?
 
Hashtag said:
I was able to read the spc with cdma ws, and change it. And when lgnpst asked for it, the spc I wrote to it unlocked the phone, and the phone also took the spc when I dialed ##3424#. Sometimes I'll get lucky and it will let me press the pound key more than once without going to the menu.
Click to expand...


Maybe I have bad drivers or something. Can you post a link to the drivers you used what version of cdma ws are you using?

I put it in download mode and it loads com port but not working.

Wonder is the dll file is making the phone think it's something else?

That .nvs file should be a backup of your nvram prior to flashing the tot, so if you flash it with lgnpst using the data recovery it SHOULD restore your nvram.
 
salvy512 said:
Wait when did you read the spec, befoe or after the flash? And how?
Click to expand...

I read/wrote it after the flash. Idk, it just worked for me. But I think it might have something to do with the fact that everything on my phone was zeroed out. For example, the spc was 000000 before I changed it.
 
kwknott said:
Maybe I have bad drivers or something. Can you post a link to the drivers you used what version of cdma ws are you using?

I put it in download mode and it loads com port but not working.

Wonder is the dll file is making the phone think it's something else?

That .nvs file should be a backup of your nvrom so if you flash it with lgnpst using the data recovery it SHOULD restore your nvram.
Click to expand...

Here are all of the drivers I'm using- Download Drivers.zip from Sendspace.com - send big files the easy way

Here is cdma ws- Download CDMA Workshop 2.7.zip from Sendspace.com - send big files the easy way
just use the loader to open cdma ws.

And I have no idea why it has vs910 instead of vm696. I was just telling you guys about my observation 0.o
 
Hashtag said:
Here are all of the drivers I'm using- Download Drivers.zip from Sendspace.com - send big files the easy way

Here is cdma ws- Download CDMA Workshop 2.7.zip from Sendspace.com - send big files the easy way
just use the loader to open cdma ws.

And I have no idea why it has vs910 instead of vm696. I was just telling you guys about my observation 0.o
Click to expand...


Thanks, I'll try these...

Thinking it has something with the dll, Maybe jcase can shed some light on that one. Wonder if the dll was created using the revolution dll?
 
kwknott said:
Thanks, I'll try these...

Thinking it has something with the dll, Maybe jcase can shed some light on that one. Wonder if the dll was created using the revolution dll?
Click to expand...

I guess its possible. I mean it would be pretty hard to do all of that from scratch, it would be easier if he based his work of something I suppose.
 
Hashtag said:
I guess its possible. I mean it would be pretty hard to do all of that from scratch, it would be easier if he based his work of something I suppose.
Click to expand...

Tried the drivers and cdma you posted and nothing.. I do get a failed on loading of the LGE Androidnet USB Modem.
 
kwknott said:
The serial port was COM5.

Wonder if my driver issues are stupid Win7 x64
Click to expand...

I'm running windows 7 x64 too, so that's not the problem.

My adb isn't working at the moment. I have no idea why, but it will only recognize the device about 5% of the time. The rest of the time it will just charge, and the phone doesn't give me an option of Charge/Mass Storage, but it will enable USB debugging. Weird :/
 
Hashtag said:
I'm running windows 7 x64 too, so that's not the problem.

My adb isn't working at the moment. I have no idea why, but it will only recognize the device about 5% of the time. The rest of the time it will just charge, and the phone doesn't give me an option of Charge/Mass Storage, but it will enable USB debugging. Weird :/
Click to expand...

Well time for some more research on flashing this tot file and trying to pull spc. Hopefully we can figure this out..

Wonder if my phone not being activated could be the reason I can't pull spc???
 
kwknott said:
Well time for some more research on flashing this tot file and trying to pull spc. Hopefully we can figure this out..

Wonder if my phone not being activated could be the reason I can't pull spc???
Click to expand...

I doubt it. My phone has no cellular service at all and I can pull the spc.
 
Hashtag I am pretty sure you're able to pull an SPC due to the flash itself. Without it we either get gibberish or nothing in cdma

I have filtered logcat and do not see sec_code _code or sec filters revealing anything pertinent.

in the bin however, I do see this
[Iatch] sec_code = %s cheak_code = %s .\z
 
Try this

adb shell logcat -b radio -d > radiolog.txt

Then dial ##3424#

then stop the logcat and send me the radiolog.txt
 
WhisperPntr said:
Hashtag I am pretty sure you're able to pull an SPC due to the flash itself. Without it we either get gibberish or nothing in cdma

I have filtered logcat and do not see sec_code _code or sec filters revealing anything pertinent.

in the bin however, I do see this
[Iatch] sec_code = %s cheak_code = %s .\z
Click to expand...
 
jcase said:
Try this

adb shell logcat -b radio -d > radiolog.txt

Then dial ##3424#

then stop the logcat and send me the radiolog.txt
Click to expand...

When I do this the logcat runs and stops within seconds and saves the .txt
, it does not give me time to do ##3424#.
 
bobloadmire said:
I won't be back to a computer until the 12TH
Click to expand...
Bah, ok. We'll have to hack something out hopefully.

Salfy, My radio.txt was almost the same as yours and I noted that the senddata (in our case I believe it would be outgoing data) RIM was translated into rawdata. Previously it was plaintext and the first 6 numbers would be the msl but virgin mobile is seriously cracking down.

From my 1 - 2 day research and spending way too many an hour looking at logcats, my best guess is that it could refer to a hex address or block that if we're lucky can be found in our memory dump. That said I have not fully read the rawdata syntax that can be found more or less online (here's one reading)
http://permalink.gmane.org/gmane.comp.handhelds.android.platform/8798

All I know is that the MSL seems to have been obfuscated and is not buried in the long rawdata hex number 5155414c434f4d4d011009000400000064000000 as yours and mine are precisely the same.

Will continue looking for more as jcase et al work their magic and think of new things.

On another note I've tried qxdm / qpst, lgpstn, and of course dfx and none of those work.

If i was very massochistic, I would slowly try the over 500 potential MSL's pulled from the bin but by then you guys would have rooted, rommed, and discussed how to best overclock the elite ;P
 
@hashtag

I wonder since the .nvs file you have is a backup of your nvram if it would be possible to open it and determine your spc?

You can backup NV in lgnpst without having to flash the tot, just not sure if contents can be viewed on PC or if it would readable.

Will have to try tonight when I get home
 
kwknott said:
@hashtag

I wonder since the .nvs file you have is a backup of your nvram if it would be possible to open it and determine your spc?

You can backup NV in lgnpst without having to flash the tot, just not sure if contents can be viewed on PC or if it would readable.

Will have to try tonight when I get home
Click to expand...

I tried pulling my NV with that backup but i froze up maybe because it was an edited version of cdma or w e and hash tag already has his spc
 
kwknott said:
@hashtag

I wonder since the .nvs file you have is a backup of your nvram if it would be possible to open it and determine your spc?

You can backup NV in lgnpst without having to flash the tot, just not sure if contents can be viewed on PC or if it would readable.

Will have to try tonight when I get home
Click to expand...

Could be. I have no idea how to do that, but here's a link if you want to take a look at it yourself- Download VS910_COM6.nvs from Sendspace.com - send big files the easy way

My replacement OE should get here today or tomorrow, I'll get to help out more when that gets here, because I'm pretty sure it's a lot different from everybody elses now.
 
salvy512 said:
your spc isn't 847446 is it?<< nvm you said it was 000000 when you looked
Click to expand...

Damn, I cannot get spc no matter what, it seems like the only way would be to get into download mode with the NV and all destroy our phones like Hash and then reflash everything we backed up and it's not even a positive way to do it.
 
You must log in or register to reply here.
Back
Top Bottom