Cloning a MP6900 (bell) to a P3050 (telus)

[dave68]

1st off would like to kindly ask if anyone here has a copy of their NVM (with ESN 0'd out of course ) from a Telus P3050 (Vogue.) that they'd be willing to share?
Why I need a copy is this:

I have a Bell MP8900 that when I dropped, I broke the power switch. So I bought a Telus P3050 (also a Vogue.) Cloned the E$N and the phone worked like a charm, but I wasn't (Like everyone else...) getting EVDO Authentication. There was a long and ardurous task of fixing that, but I decided to try using CDMA workshop to copy the NVM from the Bell to the Telus phone. I didn't realize that the Telus Phone has a DIFFERENT MEMORY MAP than the Bell. IE:
Telus NV Ram =
[NV Items]
[Complete items - 417]
(has more items like: )
0081 (0x0051) - OK
01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
whereas Bell NV Ram =
[NV Items]
[Complete items - 404]
(and the Bell does not: )
0081 (0x0051) - Inactive item

and the Telus phone will read to the end of NV Ram while the Bell phone resets when you try reading past address CE30:
Scanning memory for readable areasBell)
Unreadable area from: 0000:0000
Readable area from: 0134:0000
Unreadable area from: 01C3:0000
Readable area from: C000:0000
Unreadable area from: C0D0:0000
Process is stopped at: C3E0:0000
Scanning memory for readable areasTelus)
Unreadable area from: 0000:0000
Readable area from: 0134:0000
Unreadable area from: 01C3:0000
Readable area from: C000:0000
Unreadable area from: C0D0:0000
Readable area from: C3E0:0000
Unreadable area from: C4B0:0000

Of course silly me, I didn't make a backup, because I thought VOGU100 on both phones meant that they SHOULD be physically the same. They are not. Now all The Telus does is "searching..." for Signal. Everything else matches SID/NID pairs, MSID, etc, all same. E$N Matches.

So if some one has a copy fof the NVM from their Telus P3050 that they'd be willing to share, it'd be appreciated.

TIA

[Magicality]

I don't have a copy of what you are looking for...but do you still have the old phone with broken powerswitch?

If so you can copy most of that by yourself with QPST....I realize you said the power button is broken....to jump-start it remove the battery...plug it into a charger...then re-add the battery...it should start up.

[buddhatikkigod]

i think i have a copy of a ..... verizon rom NVM (verizon rom on a sprint 6900) if you want that....

[buddhatikkigod]

also i have a Sprint 6900 phone that im trying to get working on my Verizon network by cloning my 6700's info to the 6900. I've installed a buildos cooked verizon rom and ive copied the ESN and all the other info over but i still cant get it to access my account. The strangest thing was during one of the many resets i did on the 6900 while applying settings i actually got a txt message meant for my verizon acount on the 6900!

[dave68]

Originally Posted by buddhatikkigod

i think i have a copy of a ..... verizon rom NVM (verizon rom on a sprint 6900) if you want that....

Phone is already buggered (sort of) - So I'm willing to try... Please, and thanks. =D I was using CDMA Workshop - I have both CDMA and QPST as well as QXDM if you need.
Also I used CDMA and found Telus could read to end of Memory and the Bell Stopped at CE30 - I used CDMA to write the NVM, so I don't know if the copy from QXDM (or QPST) is the same, but I'm guessing it isn't because of the reset I get while trying to read past CE30 on the Bell, while QPST doesn't cause a reset... - After Opening port and reading Phone, then Goto Security tab, and send SPC - Next goto memory tab, and SCAN memory for readable addresses - The Telus Phone went to the end = if yours stops at CE30 or something with a phone reset then I may not be able to use it...but please send me a copy anyways - I will NOT USE YOUR ESN (i'm honest ) - JUST ZERO IT OUT.

[dave68]

Originally Posted by Magicality

I don't have a copy of what you are looking for...but do you still have the old phone with broken powerswitch?

If so you can copy most of that by yourself with QPST....I realize you said the power button is broken....to jump-start it remove the battery...plug it into a charger...then re-add the battery...it should start up.

I'm guessing you can't read or didn't understand .. I found out that the Memory Map is diffrent and that the NVM folder is LOCKED. Even boot loaded. Alas, for now I use the reset to power up, and PHM Power toys to power off, and screen save when playing music, also I (Sigh!) destroyed a trace on mobo to prevent me swapping switches... Thanks tho.

[dave68]

Originally Posted by polargoat

dunno if this will help but this is the method I used for getting my evdo working on sprint.
http://forum.ppcgeeks.com/showthread.php?p=291301

Thanks, that might help later... once I get on the CDMA network in general - Says "Searching..." in the top and it doesn't lock on a network, roaming or otherwise.

What I think I need to do, is to either get a copy of the NVM from a Telus P3050, or figure out QXDM and unlock the NVM folder. I'm begining to think that the Files in the NVM folder are written like the files in any Microsoft OS... No two files in the same place. 03.09.10 is the version of QXDM I use.

[Retard613]

How did you go about swapping the ESN's?

I have been reading for weeks and guess I'm just missing something :S

I have a P3050 from Telus witch is the HTC Touch vogue.
I have loads of stuff figured out just can't seem to get it to change to zeros or anything :S tutorial please?

Thanks

[Whosdaman]

Originally Posted by Retard613

How did you go about swapping the ESN's?

I have been reading for weeks and guess I'm just missing something :S

I have a P3050 from Telus witch is the HTC Touch vogue.
I have loads of stuff figured out just can't seem to get it to change to zeros or anything :S tutorial please?

Thanks

We are not allowed to talk about how to clone ESN's as it's against the law :-\

[Retard613]

Originally Posted by Whosdaman

We are not allowed to talk about how to clone ESN's as it's against the law :-\

Ohh really?! I'm sorry!

Well I fixed my problem neways but I am wondering if anyone has ever added an MEID to the NV at 1943? I did this now I show no service... Any ideas?

-EDIT- Im just trying to clone my BlueLGNPPL to my HTC Touch for at least voice communications.. Only problem is my LG is a MEID..