MSL/SPC for Defy XT557 - Defy Q&A, Help & Troubleshooting

I'm trying to discover the SPC/MSL for my Defy XT557 (Republic Wireless) in order to obtain root. Can flip the phone into DIAG mode using SUT LR and open a COM port, which is then recognized by CDMA WS and DFS cdmatool, but cannot even obtain a successful memory scan or dump using those programs. Radiocomm gives a green circle but no RDELEM hex readout. getprop ril.MSL readout is empty, and alogcat while entering diagnostic phone codes does not show the MSL.
Any ideas would be greatly appreciated.

So I'm thinking at this point that we should wait for the OTA in January and then we might be able to piggyback onto that... Obviously the update will be signed, so we won't be able to modify and then apply it but... we might be able to log enough of the process that we could get lucky and get the info we need to hack this sucker.

has there been any progress in the XT557...

ejlmd said:
I'm trying to discover the SPC/MSL for my Defy XT557 (Republic Wireless) in order to obtain root. Can flip the phone into DIAG mode using SUT LR and open a COM port, which is then recognized by CDMA WS and DFS cdmatool, but cannot even obtain a successful memory scan or dump using those programs. Radiocomm gives a green circle but no RDELEM hex readout. getprop ril.MSL readout is empty, and alogcat while entering diagnostic phone codes does not show the MSL.
Any ideas would be greatly appreciated.
Click to expand...
Click to collapse
How do you get the phone into diag mode using SUT LR? I have installed SUT LR and it detects a phone, but I don't see how to open a com port. I checked the device manage and it only had COM1. Thanks for your help.

How do I put my Defy XT in DIAG mode? sut lr not detects phone...

ejlmd said:
I'm trying to discover the SPC/MSL for my Defy XT557 (Republic Wireless) in order to obtain root. Can flip the phone into DIAG mode using SUT LR and open a COM port, which is then recognized by CDMA WS and DFS cdmatool, but cannot even obtain a successful memory scan or dump using those programs. Radiocomm gives a green circle but no RDELEM hex readout. getprop ril.MSL readout is empty, and alogcat while entering diagnostic phone codes does not show the MSL.
Any ideas would be greatly appreciated.
Click to expand...
Click to collapse
how you get diag mode with SUT LR???

3a4yI7aTiY said:
how you get diag mode with SUT LR???
Click to expand...
Click to collapse
Sorry, I no longer own the phone. But in any case it seemed like a dead end.
The following was posted on one of the Republic Wireless forums regarding obtaining carrier info from a rooted Defy XT 557:
For anyone trying to get information from CDMA Workshop or get info DIAG mode, you can gain access by doing the following:
change the value of /sys/class/usb_composite/diag to 1
I did this using root explorer and edited the value using text editor.
you can then connect without SPC and click read to view most settings (probably enough to cl*ne if wanted).
It also looks like data in the NV Dump file showed data connection info of:
[email protected]
hcm.sprintpcs.com

Related

Virgin mobile intercept and cdma workshop

When you connect a VM intercept into PC how do get it into modem mode? What ## code do I use? Ex: moment = ##8778# and the epic is ##8778# I've tried it but it did not work... I'm looking to back up my NV items and I have cdma workshop 3.7 any help would be greatly appreciated thanks in advance
Sent from my Nexus S 4G using XDA Premium App
Curious about this as well. On the Epic you do this to get it into modem mode and then you can read it.
This intercept the best I can do is get it with the drivers where I can just see it as a modem and not actually read the phone itself.
Hey guys..
I was having some trouble with this too.
Here is the solution:
1. (If you already have your MSL/SPC, skip this step)
You have to have your MSL/SPC 6 digit code. This is not easy to come by since you can't connect your Intercept as a modem to read it with Cdma Workshop or QPST. You could call VM and ask, but I doubt they'll give it to you.
However there is a workaround:
Download this APK:
http://www.mediafire.com/?jjjynwp2y65ephj
It's a little app called ConnectBot. Once installed, in the lower left hand corner, where it says SSH, change that to "Local".. Then put anything in the text box you want.
When the command prompt comes up, type the command "getprop ril.MSL" and hit enter.
This should give you your MSL/SPC 6 digit code!
2. Dial ##PORT#, enter your MSL/SPC, and make sure both options are set to "modem" and not "pda"
3. You are gonna need additional drivers to access the phone as a modem. On Windows 7, it tries to install, then prompts you to download "Samsung PC Studio 3"
DO NOT INSTALL The one it suggests! Instead install this one:
http://www.mediafire.com/?k7pxzu3uc03nepn
This program will install the drivers you need.
Any questions just ask,
Kev
bhbs203 said:
When you connect a VM intercept into PC how do get it into modem mode? What ## code do I use? Ex: moment = ##8778# and the epic is ##8778# I've tried it but it did not work... I'm looking to back up my NV items and I have cdma workshop 3.7 any help would be greatly appreciated thanks in advance
Sent from my Nexus S 4G using XDA Premium App
Click to expand...
Click to collapse
you will need to have you msl to get there...
##port# to change the port from modem to pda doesn't work with some hacked flashes
or ##7678# also ##data# to get to the dangerous data screen on sprint ##debug# still works too

my dfs progress

Received my boost aquos crystal today. Was hoping to dfs it to page plus as easy as the moto g, but was unsuccessful. I was able to read all normal values using dfs, just not write.
Process:
Entered diag mode using ##diag#.
Installed sharp drivers. (I will attach).
Updated 306sh drivers using Device Manager in windows. Select driver "I know location" or whatever. Chose "show all drivers". Scroll to Sharp Corporation. Select USB diag driver.
Open in dfs. ( I got my Spc code from boost by registering my device on their website to my account. Don't worry, they dount make you pay. Choose your plan, create a new phone number or whatever needed. Doesn't matter... They call it MSL code.)
Entered Spc in dfs and was able to read all info.... But nothing I wrote saved.
In the phone's ##diag# screen, I'd I selected the serial option, I installed the drivers... Same results.
I also force installed my moto RAZR m xt907 drivers (also msm Qualcomm) but same results.
Hope this helps someone with something.
let me know if the link works https://docs.google.com/uc?id=0B2YrFGY95PiIeklOT1VVRU5QVGs&export=download
hemanolio said:
Received my boost aquos crystal today. Was hoping to dfs it to page plus as easy as the moto g, but was unsuccessful. I was able to read all normal values using dfs, just not write.
Process:
Entered diag mode using ##diag#.
Installed sharp drivers. (I will attach).
Updated 306sh drivers using Device Manager in windows. Select driver "I know location" or whatever. Chose "show all drivers". Scroll to Sharp Corporation. Select USB diag driver.
Open in dfs. ( I got my Spc code from boost by registering my device on their website to my account. Don't worry, they dount make you pay. Choose your plan, create a new phone number or whatever needed. Doesn't matter... They call it MSL code.)
Entered Spc in dfs and was able to read all info.... But nothing I wrote saved.
In the phone's ##diag# screen, I'd I selected the serial option, I installed the drivers... Same results.
I also force installed my moto RAZR m xt907 drivers (also msm Qualcomm) but same results.
Hope this helps someone with something.
let me know if the link works https://docs.google.com/uc?id=0B2YrFGY95PiIeklOT1VVRU5QVGs&export=download
Click to expand...
Click to collapse
can't download the files could you please send to me [email protected]
what is DFS ?
you may try msm drivers.
whynot4444 said:
what is DFS ?
Click to expand...
Click to collapse
cdma tools 。。。 now I need drive for 306 so i can connect 306 to DFS but I cant find the COM drive 。。。
cairui505 said:
cdma tools 。。。 now I need drive for 306 so i can connect 306 to DFS but I cant find the COM drive 。。。
Click to expand...
Click to collapse
oh, you need drive DIAG, but what do you want with this port?
Hey guys I just found this thread. I am a CDMA Programmer and I wouldn't mind tinkering with this phone. Did it come with stock drivers embedded in the phone? Most do or sometimes you need to get adb driver packs for it. I am willing to help as I have DFS, CDMA Workshop, QPST and more. Please lmk what the current progress is on your end and I'll go ahead and share what I find when the phone arrives at my house. Let's get this rollin again!
kalanir said:
Hey guys I just found this thread. I am a CDMA Programmer and I wouldn't mind tinkering with this phone. Did it come with stock drivers embedded in the phone? Most do or sometimes you need to get adb driver packs for it. I am willing to help as I have DFS, CDMA Workshop, QPST and more. Please lmk what the current progress is on your end and I'll go ahead and share what I find when the phone arrives at my house. Let's get this rollin again!
Click to expand...
Click to collapse
yes in sharp web page have stock drivers.. also your can search bcs I saw that one guy is share diag modem driver(also here have msl unlock guide) .. most big problem is that we don't have root and other is if you can seen that phone have gsm radio..
loonbg said:
yes in sharp web page have stock drivers.. also your can search bcs I saw that one guy is share diag modem driver(also here have msl unlock guide) .. most big problem is that we don't have root and other is if you can seen that phone have gsm radio..
Click to expand...
Click to collapse
Ok I just ordered a bad esn one from eBay. Is it easy to get the msl code for it aside from activation? That's gonna be a big pain the @$$ if it's not like the Samsung or HTC.
OK guys so I just got my Sharp Aquos today and I have to say, WHAT A PIECE OF ART!!!! But I have started to work on it now. Did have some issues with it but I got it working. Managed to get into a hidden menu to do a RTN reset of it and now trying to get Diag Drivers. I got my MSL courtesy of an hour of research that surly paid off. So next step: connection to CDMA Workshop! Let me know what drivers you have found that work for this for the coms.
kalanir said:
I have to say, WHAT A PIECE OF ART!!!!
Click to expand...
Click to collapse
you r 100% right
kalanir said:
Managed to get into a hidden menu to do a RTN reset of it
Click to expand...
Click to collapse
how?
kalanir said:
trying to get Diag Drivers.
Click to expand...
Click to collapse
please share
kalanir said:
I got my MSL courtesy of an hour of research that surly paid off
Click to expand...
Click to collapse
can u tell me how?

How to Enable Diag Mode in CM13?

Okay so here is the issue I'm facing today. I bought a Sprint Galaxy S5, and I managed to unlock it for domestic use (AT&T). I cannot get an LTE connection because my Qualcomm processor does not have the appropriate bands to use ATT LTE's network.
I read on here that you can write your NV memory to write the firmware and enable these other bands using QPST and QXDM. The issue I'm having though is getting my computer to install the diagnostic driver for COM port. It reads the Modem under modem tab in device manager. Since the computer doesn't think there is a diagnostic port, QPST configuration cannot open a diag port which is what I need. I've been able to successfully put my phone in rndis + DM + modem by using this in emulator,
su
setprop sys.usb.confing_rndis,diag,diag_mdm
Do not type the first _ as it's meant as a space bar, but USE diag_mdm
But there is no indication that any driver has installed, and does not appear in device manager (even with hidden devices shown).
I'm running 6.0.1 CM13 w/twrp recovery with SELINUX set to permissive.
On windows 8
I also noticed that the guide to add frequency bands was written in 2014, I also know that in Lollipop, you needed to enable CP Logging to get it show up.
What I'm wondering is if there is a missing step to properly installing the diag driver, or if Qualcomm/Samsung found other means to activate it.
I noticed that when using EFSPro I can set it to Diagnostic + Modem + adb but I can only read not read/write NV memory
Also I observed when I send the SPC to read the phone with EFSPro, it says
"SPC was accepted by the phone!"
Then followed by.. "SPC was not found".
Then after I close that popup it reads my NV memory, but I can't write.
Is there a method to enable CP logging on CM13 MM and install the diag com port for QPST use? I don't have a stock recovery to enable CP logging through usual means in as I'm using TWRP.
Link to GUIDE
http://forum.xda-developers.com/galaxy-s5/general/how-to-add-rf-lte-frequency-bands-to-t2886059
Thanks in advance.
Sent from my SM-G900P using XDA-Developers mobile app
xHolomovementx said:
Okay so here is the issue I'm facing today. I bought a Sprint Galaxy S5, and I managed to unlock it for domestic use (AT&T). I cannot get an LTE connection because my Qualcomm processor does not have the appropriate bands to use ATT LTE's network.
I read on here that you can write your NV memory to write the firmware and enable these other bands using QPST and QXDM. The issue I'm having though is getting my computer to install the diagnostic driver for COM port. It reads the Modem under modem tab in device manager. Since the computer doesn't think there is a diagnostic port, QPST configuration cannot open a diag port which is what I need. I've been able to successfully put my phone in rndis + DM + modem by using this in emulator,
su
setprop sys.usb.confing_rndis,diag,diag_mdm
Do not type the first _ as it's meant as a space bar, but USE diag_mdm
But there is no indication that any driver has installed, and does not appear in device manager (even with hidden devices shown).
I'm running 6.0.1 CM13 w/twrp recovery with SELINUX set to permissive.
On windows 8
I also noticed that the guide to add frequency bands was written in 2014, I also know that in Lollipop, you needed to enable CP Logging to get it show up.
What I'm wondering is if there is a missing step to properly installing the diag driver, or if Qualcomm/Samsung found other means to activate it.
I noticed that when using EFSPro I can set it to Diagnostic + Modem + adb but I can only read not read/write NV memory
Also I observed when I send the SPC to read the phone with EFSPro, it says
"SPC was accepted by the phone!"
Then followed by.. "SPC was not found".
Then after I close that popup it reads my NV memory, but I can't write.
Is there a method to enable CP logging on CM13 MM and install the diag com port for QPST use? I don't have a stock recovery to enable CP logging through usual means in as I'm using TWRP.
Link to GUIDE
http://forum.xda-developers.com/galaxy-s5/general/how-to-add-rf-lte-frequency-bands-to-t2886059
Thanks in advance.
Sent from my SM-G900P using XDA-Developers mobile app
Click to expand...
Click to collapse
Did you ever solve this? I plan on following the same guide and I too am having this same problem.

Need my msl

I was wondering if anyone has been able to get their msl from sprint? I am trying to get msl ans having no luck.
Tsukiyohikage said:
I was wondering if anyone has been able to get their msl from sprint? I am trying to get msl ans having no luck.
Click to expand...
Click to collapse
I was able to get my msl by following the advice of @be free
See my similar thread here.
Sent from my Sprint HTC 10 using Tapatalk
Thanks. I tried it, but couldn't get it to work for me.
Tsukiyohikage said:
Thanks. I tried it, but couldn't get it to work for me.
Click to expand...
Click to collapse
Hi Tsukiyohikage, i got you covered, send me a PM and will help you with the MSL of your phone, i think i have an easy way to get it
Tsukiyohikage said:
I was wondering if anyone has been able to get their msl from sprint? I am trying to get msl ans having no luck.
Click to expand...
Click to collapse
Can you use attached - just use password oriax123 and choose scan. Then change method from NV to HTC. Finally click Read SPC - your MSL is the 6 digit code which is output.
Need to put phone in DIAG (##3424#) and then connect phone to PC. I used WIndows 10 x64, however, YMMV.
pinky059 said:
Can you use attached - just use password oriax123 and choose scan. Then change method from NV to HTC. Finally click Read SPC - your MSL is the 6 digit code which is output.
Need to put phone in DIAG (##3424#) and then connect phone to PC. I used WIndows 10 x64, however, YMMV.
Click to expand...
Click to collapse
Thanks that worked.
Tsukiyohikage said:
Thanks that worked.
Click to expand...
Click to collapse
i can confirm this works
http://forum.xda-developers.com/sprint-one-m9/general/nv-unlock-sim-t3314755
just download the basicflasher located at bottom of first post
Basic Flasher gives me a connection error.
Rooted Sprint HTC 10, still can't get MSL by any method - Basic Flasher, CDMAtoo, Terminal Emulator... any other advie?
dreadpiraterobert said:
Basic Flasher gives me a connection error.
Rooted Sprint HTC 10, still can't get MSL by any method - Basic Flasher, CDMAtoo, Terminal Emulator... any other advie?
Click to expand...
Click to collapse
After entering the DM Command Service (##3424#), did you activate "DM" mode? Because if you didn't, the Basic Flasher won't find your phone. After clicking "Scan", log should show "HTC Diagnostic Interface" and a (COM X). Click "Connect" and you should see "Device Connected." Change Method to "HTC" and click "Read SPC". MSL should show up next to "SPC:".
When I ran this program, it threw a Microsoft C++ Framework error. Just click "Continue" and program will still work.
cytherian said:
After entering the DM Command Service (##3424#), did you activate "DM" mode? Because if you didn't, the Basic Flasher won't find your phone. After clicking "Scan", log should show "HTC Diagnostic Interface" and a (COM X). Click "Connect" and you should see "Device Connected." Change Method to "HTC" and click "Read SPC". MSL should show up next to "SPC:".
When I ran this program, it threw a Microsoft C++ Framework error. Just click "Continue" and program will still work.
Click to expand...
Click to collapse
After getting the MSL directly from the Bootloader (Basic Flasher could not connect... and getting it from the bootloader took a looooong time) I'm now stuck with the NV tools. Same problem, can't connect to COM 3. (Or any other port.)
dreadpiraterobert said:
After getting the MSL directly from the Bootloader (Basic Flasher could not connect... and getting it from the bootloader took a looooong time) I'm now stuck with the NV tools. Same problem, can't connect to COM 3. (Or any other port.)
Click to expand...
Click to collapse
How'd you get your MSL directly from the Bootloader? I don't remember seeing it displayed in the bootloader screens. I couldn't get Basic Flasher to find my phone on any COM port until I activated DM Mode. If you did that and it still didn't see it, don't know what could be the problem. Are you able to run adb commands on your phone from CMD window without any issue?

The perfect way to change SPC to zeros for majority of Qualcomm devices ( Exclusive )

hi
In this Blog we will explain how the SPC is filtered for all Qualcomm devices. This method is applicable for all Qualcomm devices available in the markets such as ZTE-ALCATEL- SMASUNG - umax - Kyocera
First, the device must be in DIAG mode, the device DIAG port will be recognized in device manager
Second: You should have any program that sends DM commands via COM serial as directly as DFS version 13.9.19 .You can download it from the following link
Setup DFS 13.9.29.0
Third: Open the DFS program and connect to the specified port and then try to enter the spc code six zeroes you will find that the phone is not responding .Now copy the code in the bottom and paste in the CMD box in the dfs tool and click CMD icon you will see a Request and Responce words in a light blue color on dfs log window
Code:
4B0B24005D0200000E00550006003030303030300B3E7E
Forth: enter six zeros (000000) in SPC box and click SPC icon , the light blue DEVICE UNLOCKED words will be shown on dfs log window
The operation completed successfully
https://youtu.be/5F-icMnxbLE
===================
follow us on our official page
https://bassye.com
or on Facebook page
 @yemenbases

Categories

Resources