MEID on Titan/Vogue
 

Hello,

For those interested, I am documenting how you can give your Titan/Vogue a MEID.

First, a few disclaimers:
THIS IS NOT A TUTORIAL ON HOW TO CHANGE YOUR ESN. ALTERING THE ESN ON YOUR DEVICE IS ILLEGAL, AND THIS FORUM HAS A ZERO-TOLERANCE POLICY ON CHANGING YOUR ESN. THIS IS NOT A TUTORIAL ON HOW TO CLONE YOUR PHONE. CLONING YOUR PHONE IS ILLEGAL AND THIS FORUM HAS A ZERO-TOLERANCE POLICY ON CLONING PHONES. THIS IS NOT THE PLACE FOR ASKING FOR QPST/QXDM, AS WAREZ IS ILLEGAL AND THIS FORUM HAS A ZERO-TOLERANCE POLICY ON WAREZ. ADDING A MEID MAY BE IRREVERSIBLE AND I CANNOT BE HELD RESPONSIBLE FOR ANYTHING THAT HAPPENS TO YOUR PHONE.

Regarding ESN changing being illegal, see : http://frwebgate.access.gpo.gov/cgi-...=2002&TYPE=PDF

I am in the process of getting some letters typed up to get the FCC to change this outdated law which really serves no purpose. Interestingly, 47 CFR 22.919 makes it illegal for a phone manufacturer to update the firmware, see 47 CFR 22.919(c) in relevant part:

"Cellular mobile equipment must be designed such that any attempt
to remove, tamper with, or change the ESN chip, its logic system, or firmware originally programmed by the manufacturer will render the mobile transmitter inoperative." (emphasis added)

Firmware updates are clearly, (1) not the originally programmed firmware and, (2) not programmed by the manufacturer.

With that said, it is my belief that adding a MEID to your Titan/Vogue is not illegal, so long that you are not cloning your phone. A MEID is not a ESN, and is not a uniquely identifying serial number for a Titan/Vogue like a ESN is. Most likely, you are adding a MEID for pure fun!

To start, you need:

(1) Titan/Vogue in SuperCID state
(2) QPST
(3) QXDM
(4) SPC Code used for EPST

The steps are actually very easy.
1) Go to the Titan/Vogue. ##DATA#, or start \Windows\DMROUTER.exe -diag
2) Start QPST, and enter service programming.
3) Press "Read from phone". You will be asked for your SPC number. Enter it.
4) Close QPST.
5) Start QXDM. Select "NV Items" from view.
6) Scroll to item 1943, press "READ". It should show item inactive.
7) Enter your desired MEID and press "WRITE"
8) Reset your phone.

Congrats, you now have MEID on your phone!

EDIT:
This operation is now reversible. According to NexVision, if you relock your phone using the 1.xx Relocker, and then Flash a 2.xx radio onto it, it will inactivate the MEID item.

Re: MEID on Titan/Vogue
 

Thanks!!! This worked on my P3050 HTC Touch from Telus...
But now every time I turn the phone on, the status is in Airplane mode. When I turn it off and turn the Phone on I have no service. Any ideas?

Thanks

-EDIT-
I have found out that I entered the MEID as a DEC instead of a HEX. If anyone plans to do this to there Vogue make sure you enter your MEID as a HEX and make sure it is correct! You will not be able to change it again as of right now..

Re: MEID on Titan/Vogue
 

Whats the purpose of MEID?

Re: MEID on Titan/Vogue
 

+1

What does this allow you to do??

~John

Re: MEID on Titan/Vogue
 

indeed it works... you are the man no2chem... and this doesn't just add MEID.. it does a lot more ... can't thank you enough

Re: MEID on Titan/Vogue
 

I must confess, I had never heard of a MEID prior to this thread. I found what it is here:
http://www.phonescoop.com/glossary/term.php?gid=254
Claims it's a replacement for ESNs.... so according to the original post stating that "A MEID is not a ESN, and is not a uniquely identifying serial number for a Titan/Vogue like a ESN is. Most likely, you are adding a MEID for pure fun!".. according to the definition I found in the link I just posted, it seems to claim the opposite. :scratch:

Re: MEID on Titan/Vogue
 

Does this only work in a Titan or will it work in a diamond/touch pro etc??

~John

Re: MEID on Titan/Vogue
 

Diamond and Touch Pro already have MEID.. so no need to add one !

Re: MEID on Titan/Vogue
 

There is a third or fourth item in NVList which is SCM (Station Class Mask) which also Decides Phonescapability for Only ESN / or MEID Preferred or pESN

If the Value is 0x2A then Phone is ESN Based
If the Value is 0x3A then Phone is MEID Based

Mogul have SCM as 0x2A and Diamond have 0x3A

can anybody try to change SCN to Toggle Betwwen Compulsory ESN r Optional MEID Supports

Re: MEID on Titan/Vogue
 

Yes, for the Diamond and newer devices, MEID is the serial number... However, as it is not set in the shipped Titan, it could not be the serial number.

Re: MEID on Titan/Vogue
 

I have written the MEID inccorectly in Dec form. I can't change it and I have no service. Someone please help.

How can I reverse it?
How do I calculate the MEID into Hex form from the A1xxxxx format to do it right?

Re: MEID on Titan/Vogue
 

wow im really lost i thought i had it at first but the 0x2A thing threw me off. So..... when i put the meid in am i suppose to use 0x2A (Sprint Mogul), am i suppose to erase the E*N or does it matter ?, am i suppose to use the Hex or Dec (i read the post that said Hex but will it work for titan?), i changed it once(using HEX) then it said i was on the 1x network but when i made phone call nothing happened so i changed it using 0x2A now it boots with phone off and says i have no signal and when i try to change it again it says write only (this will be the third time) so yea to sum it up i can get into the phone but what it the correct way to get a meid functioning.

Re: MEID on Titan/Vogue
 

Does anyone have any experience reversing an incorrect MEID input on the vogue?

Re: MEID on Titan/Vogue
 

Yes flash a pregps radio and start over as if a brand new device..

Re: MEID on Titan/Vogue
 

Nexvision, THANK YOU!! I do believe I owe you a beer. I've heard that downgrading radio from 3.xx to pre-gps (1.xx or 2.xx) can be dangerous. Do you have any recommendations on a right way to do it or a way it has worked for you?

Re: MEID on Titan/Vogue
 

I have done this method on roughly 8 devices now with no ill effects. Here is my method flash relocker when it tells u to unplug and plug device back in DO NOT. Let unlocker fail then flash 2x shipped ROM (shipped rom comes in for of .exe and contains Radio and ROM) now this flash should also fail between 4-11% no big deal hit reset u will see your still in bootloader but now your SPL has changed now rerun .exe (shipped rom) will flash succesfully this time and you will have a device the way it was shipped to you.

NOW OF COURSE ANYTHING U DO IS AT YOUR OWN RISK JUST CAUSE IT HAS WORKED FOR ME OR OTHERS DOES NOT GUARANTEE YOUR SUCCESS.

Re: MEID on Titan/Vogue
 

when i enter the meid on the titan theres no effect, am i suppose to enter a pESN since its ESN based?

Re: MEID on Titan/Vogue
 

Wow.. Where to start.. I was reading this, wondering what n00b was going to go so far as saying a firmware update was illegal, and then realizing it was no2chem, WTF?! You should know better.

You need to read the ENTIRE section, not just part of a sentence, you're missing a KEY portion.

The purpose of that section was to eliminate/reduce cloned ESNs, and it CLEARLY states that any attempt to change '.. the ESN chip, it's (the ESN chip) logic system...' etc MUST render the mobile transmitter inoperative. You forget that phones made when the law was put in place used PROM/EPROM/EEPROM to store data, not hooked up to some snazzy computer with a USB cable and hacked software. Firmware INCLUDED things such as tuning data, frequency and channel assignments, and the ELECTRONIC SERIAL NUMBER. The LAW says that should the ESN storage system be modified or removed, that it DISABLE the transmitter, Ie it won't work on the network. The way it was implemented in most systems was a checksum, a value derived from the known value created by the ESN. The ESN changes, and therefore the checksum is no longer valid, hence, the device enters into a 'dumb' mode, where it does nothing, meeting the requirements of the FCC to disable the transmitter when the ESN is changed. Obviously equipment manufacturers needed ways to program the phones, so they knew how to change the ESN while changing the checksum as well, that info inevitably leaks out, and 'hackers' reverse engineered the phones to see how things worked...



.....All this before TDMA/CDMA/GSM even existed......


AMPS (Analog Mobile Phone System) was the name of the game back in the day, which is what the laws were aimed at, at the time.


- FCC licensed tech.

Re: MEID on Titan/Vogue
 

cool works.

Re: MEID on Titan/Vogue
 

why would I want MEID on my phone? (besides for fun)

Re: MEID on Titan/Vogue
 

hetaldp, this does Not Work to Reverse.

SCM toggled back to 0x2A with any ESN after MEID write got "no service"
Flashed non-GPS unlocker then stock non-GPS ROM to fix (basically downgraded Radio)

Re: MEID on Titan/Vogue
 

Are you really an FCC licensed tech?

Dude, I've been doing tons of research and trying to contact the FCC regarding the now conflicting laws surrounding ESN modification (apparently a CA lawsuit claimed that ESN numbers could be changed to make a device compatible with another network).

My efforts to contact the FCC ended in a "look the other way" response. Basically, the FCC won't exactly give me any blessing, but it doesn't care if I clone ESNs as long as no one is reporting a loss.

Re: MEID on Titan/Vogue
 

Yeahhhhhh, my TITAN is BRICKED now, after add the "MEID" to your phone there is not signal, ok then you Relock your phone and when the stock pre-GPS ROM + RADIO is flashed to fix the problem you created adding the " MEID ", guess what, you get stuck on windows mobile splash and NO RADIO. LOL....... I'm so there. Now WTF i do.](*,)

Re: MEID on Titan/Vogue
 

I would recommend reading a little better.

Re: MEID on Titan/Vogue
 

Thanks, i did spend more time reading but what i did to solve my problem was after relock i flashed Stock ROM 2.17 + Radio 1.47 when it completed no Radio was present so i decided to reflash but this time Sprint Official ROM 3.35.651.2 Radio 3.35.04 and BOOM Mogul is up and running.

P.S. when i downgrade bootloader was SPL 1.7, after re-flashed whith ROM 3.35.651.2 it changed to SPL 2.06.:headbang:

Re: MEID on Titan/Vogue
 

If i add an meid to a touch vogue from alltel, flashed with official sprint rom to be used on sprint, will gps,tv,etc... work?

Re: MEID on Titan/Vogue
 

do you put the dec or hex MEID esn in the value???

Re: MEID on Titan/Vogue
 

i tried to put the Dec MEID and it tells me ( Error Recieved: Item read Only ) ??????????

Re: MEID on Titan/Vogue
 

I am also getting a read only error.

Re: MEID on Titan/Vogue
 

and


you need to relock your devices and then start over when you are about to write the e$n and meid make sure you got the right ones

the pE$N goes on the E$N................ Examples:: E$N: 806xxxx4

the MEID HEX on the MEID................Example:: MEID: A000000xxxxxxD

Re: MEID on Titan/Vogue
 

I am hoping someone can set me in the right direction. I have a Telus Apachie and Bell Vogue. I have been using the Vogue on the Telus Network without out issue, except without EVDO. I have been digging to find a solution that works, nothing so far. I thought that by creating a MEID on the Vogue it might open a door to the EVDO. I messed up the MEID and had to reflash. I am needing to know if first of all will this help my EVDO quest, and 2nd how do I get a MEID from my ESN?

Re: MEID on Titan/Vogue
 

:violent2: I have a Sprint Touch (Vogue) I am having the following problem, I wrote the wrong meid and followed Nexvision's process to downgrade radio from 3xx to 2xx it seemed to work perfectly except when i went to write new MEID it somehow reverted back to old one again ive had success writing the new pesn and everything but the MEID is no go i am using qxdm 03.09.19 now all i get is the "Item Read Only" error, what now I tried reflashing it with the 2xx radio/rom, i tried flashing back to 3xx then back down again but no go

Re: MEID on Titan/Vogue
 

the 2x rom is to revert back to a non meid state. use a current one if you want an meid.

Re: MEID on Titan/Vogue
 

Thank you for the response. That's the kicker once i flashed 2xx rom I expected I would get to start from scratch again but its all still there MEID, and all my other EPST changes that I made, untouched... ????

Re: MEID on Titan/Vogue
 

Thanks very much to the original poster here. The MEID information got me pointed in the right direction to get my Titan on a Verizon PrePay plan! Without getting screwed for extra Data charges! I did write the MEID with QXDM, but on resetting the phone, I got the "Xed" out Data, and Signal indicators at the top of my screen- meaning Radio Dead"...

Well the way I fixed the Dead Radio was to: Use CDMA Workshop 2.7 to correct the hex e$n, then also set the SCM from 2A to 3A. closed all, reset the phone, and dialed *228 -option 1 to reprogram the phone. Presto! Radio back on, phone makes and receives calls!

Note: Be careful with the MEID format sometimes there are only 5 0's (Zeros) after the "A", not 6. Do not include the 0x characters when entering it. Start with the "A".

p.s. My Titan is on Radio Version 3.42.50, and the above worked for me without having flash back to a locked ROM, or an earlier radio version. I'm running the Alltel Windows Mobile 6.1 System on it. With an Android 1.5 subsystem.

There are converters on the internet that will calculate the pE$N (Hex E$N) from a MEID. Just do a search for it. I didn't need to figure it out myself because the sticker on my Verizon "Dumb" phone had both the pE$N, and the MEID. Good Luck to All.