Change NV-Item 148

[NetrunnerAT]

I need a short help, for crosschecking a problem!

I use a old 1.27.xx.xx Radio for changing NV Item.
My Device is SuperCID and secure onlocked in the Bootloader.
I can read my Radio Ram and dump it with the QPST Tools ... that means ... i know the most things!

BUT

With the NV Item Manager, i can read out but not change! If i want write this item, i doesnt get a success message and it doesnt write it.

It means ... i read out again ... same value!

My question ... what radios can change it? Can some body tell me how i do this, to see what error i make?

[jockyw2001]

Don't worry NetRunnerAT, I will get back to you :)

[jirkab]

You say me how connect Kaiser to COM port, please and I say you how change NV Items.

[jirkab]

Already I know how connect Kaiser (WM Qualcomm) over COM port (QPST server) :D.
NV Items it is possible edit over QXDM (Qualcomm eXtensible Diagnostic Monitor - NV Browser :cool:) or QPST - Software Download -> Backup-> edit-> Restore.

[NetrunnerAT]

What QXDM Version you have? My write MSM License error. Have you a different version?

My is QXDM 3.09.16 PRO

[edit] now we need the NV-Item Password! Its 16 digi in hex -_____-° 0000 doesnt work!

[edit2] we need a full Kaiser qcn dump! For some GPS and Wifi offset value and items!

[jirkab]

I am using QXDM 3.09.10 (edited licence), version valid for 31.1.2100 :D.
This version is OK for this procesor (Kaiser - MSM7200) also: SURF7200, sw version: M7200B-SDCCAAZD-2.2.8011018T, Phone model:206.
Change NV Items over NV browser QXDM works fine. For example change NV Item 148 no problem.
But change NV Item 550 (IMEI) does not working. This NV Item is only for read.

My Kaiser has SPC:000000.
I have full: 00000000_0.qcn - no problem.

File Version: Major 1, Minor 0, Revision 0
File Summary:
Phone Model: 206 [SURF7200], Configuration Name: default, Total NV Item Count: 795

Phone Model 206 [SURF7200] Configurations:
Configuration Name: default
Mobile Properties:
ESN: 0x00000000
Phone Model: 206 [SURF7200]
NV Major: 0
NV Minor: 0
SW Version: M7200B-SDCCAAZD-2.2.801018T
Client Name: QPST Software Download 2.7.0.264

[ZhenMing]

I am using QXDM 3.09.10 (edited licence), version valid for 31.1.2100 :D.
This version is OK for this procesor (Kaiser - MSM7200) also: SURF7200, sw version: M7200B-SDCCAAZD-2.2.8011018T, Phone model:206.
Change NV Items over NV browser QXDM works fine. For example change NV Item 148 no problem.
But change NV Item 550 (IMEI) does not working. This NV Item is only for read.

My Kaiser has SPC:000000.
I have full: 00000000_0.qcn - no problem.

File Version: Major 1, Minor 0, Revision 0
File Summary:
Phone Model: 206 [SURF7200], Configuration Name: default, Total NV Item Count: 795

Phone Model 206 [SURF7200] Configurations:
Configuration Name: default
Mobile Properties:
ESN: 0x00000000
Phone Model: 206 [SURF7200]
NV Major: 0
NV Minor: 0
SW Version: M7200B-SDCCAAZD-2.2.801018T
Client Name: QPST Software Download 2.7.0.264
where can we download this? will it work with Niki?

[NetrunnerAT]

where can we download this? will it work with Niki?

what you mean? the tool or his qcn file? for tool ... look in my shared folder!

@jirkab ... can you send me your qcn file? i need some value! i will handle it carefull and i dont publish it. i need it for some HTC Nike GPS unlock tests.

[jirkab]

Yes, this tool (QPST, QXDM) is working for all Qualcomm chips in Diagnostic Interface/NMEA Interface/Modem mode(emulation USB to Com port/s mode).
You must have WM PPC (Qualcomm) SuperCID and Security Unlocked + HardSPL with AT command mode support. Over MTTY.exe connect device as modem - com port.

To NetrunnerAT: Check your e-mail (netrunnerat@......com). I Sent you .qcn file from Kaiser Radio ROM 1.27.15.32 (NV Item 550 with IMEI and 923 with IMSI is changed ;)). Send me password for your "Public shared Folder", for next file upload.

Has Nike antenna for GPS?

[NetrunnerAT]

i have ... super-cid, secure unlocked, at commands and rtask, hard spl, but i cant edit the items i need!

htc use new security functions! qpst and qxdm is useless! we try some dirty reverse enginered tools for siemens phonse ... same error! i cant edit the most items ... next ... i cant access the bootloader and radiobootloader via keys.

some nike are very secure -_____-°

about antennas ... i think they exist! antenna have every time a special look. wifi antenna use the most time the same dipol construction. i can see 3 different types of antennas inside the nike. two different RF connector for externals antennas. one connecter i have messure a GSM signal. the other is death in the moment.

[jirkab]

I am using standard Q utilities and all works ok with Kaiser (change NV Items and structures). Mistake maybe in Matrix :D.

[NetrunnerAT]

no ... the nv-items are secure protected on a htc nike. possible some items change back, if some special items are not present or set right.

[Ogilthorpe]

I have the same problem here, when I try to change a NV Item with QPST, it says that the item is read-only and cannot be changed!

What is the procedure to make an NV Item RW ?

Thanks a lot for your help.

[adfree]

What is the procedure to make an NV Item RW ?

This is an really really good Question.

NV items are stored as files in folder NVM.
If folder NVM is secured/locked...

There are different ways to force NV item change, without access to NVM through BitPim or EFS Explorer...

But you need to find them. :D

1 funny way is to dump CEFS and manipulate NV items "OFFLINE" on PC instead on high secured mobile.

But the problem is, to identify the NV items in Dump...

2. way is to make NVM folder visible. :cool:
Different methods on different mobiles...

But if u can dump CEFS, u can rename some NVM Strings... write back CEFS...

To dump CEFS look into QPST... Gang Bang uups I mean Gang Flash Image App...

But before check, if an folder NVM exists... But I think yes. Because this is an Qualcomm Standard thingie...

NOT tested, NOT confirmed on MSM7200. Need to be tested... on your mobile...


Best Regards to jirkab :)