[Q] how do you scan meid locations with cdma workshop 2.7 thats all i want to know ?

Search This thread

jraz305

Senior Member
Jun 4, 2011
350
21
i updated to gb2.3 and now all the old meid locations dont work /... can some point me in the right direction thank you ...
the radio updated 2.15.00.05.02


please help thank you
 

jraz305

Senior Member
Jun 4, 2011
350
21
Cen some one help me with this please ....

ive been up all night trying to scan meid .. locations but no go ... cdma 2.7 get ups to 75 % and reboots the phone ...


some one eraseed all the guides that were up last month ....

memory tab scan and i get this

Scanning memory for readable areas:
Unreadable area from: 0000:0000
Readable area from: 00FA:0000
Unreadable area from: 0100:0000
Readable area from: 0109:0000
Unreadable area from: 01DC:0000
Process is stopped at: C000:0000

but what do i do next ...... i scan starting 00fa:0000
and what do i put for ending and bytes
 

jraz305

Senior Member
Jun 4, 2011
350
21
gb 2.3

if anyone has gb 2.3 stock and can scan for there meid locations it would help alot.. thank you scan with cdma workshop
 

jraz305

Senior Member
Jun 4, 2011
350
21
ok im going nuts

I can't seem to find any Meid locations through cdma ws 2.7.all the guides. Seem to have disappered from all the local threads :( . Can some one pm me or send me a link to a guide or some thing thanks
 

Ahmad_14

Member
Mar 10, 2011
10
2
I have only been able to find eight meid locations for the new EVO 2.3.3 update. Google DFS Cdma tool. It's free, you dont have to pirate it and it scans memory and reads just fine. If anyone finds more locations, I would be interested in knowing them. Thanks in advance!
 
  • Like
Reactions: jraz305

Clouded

New member
Jun 15, 2011
4
0
Is there a market version of either program or at least one for mid locations because all I have is my phone currently and would like to help

Sent from my EVO 4G using XDA App
 
Last edited:

Ahmad_14

Member
Mar 10, 2011
10
2
I have looked for a market application I can install that would make it easy to find the meid locations but I could not find any. So far the best method for scanning meid locations is to scan with a program like 1.CDMAWorkshop or DFS CDMA Tool 2. Write your memory scans to a bin file 3.Open up a hex editor and look for the reverse Meid and Esn.

I have done this and have been able to zero out the esn but not the meid. I think I'm missing one location for the meid :(

It sucks! I totally wanna get my evo up and running :p
 

jraz305

Senior Member
Jun 4, 2011
350
21
post the meid locations .. i have the esn locations which are

ESN addresses:
00FD:2DC8
00FD:4694
00FE:581C
00FF:581C
0127:DCCC
015F:AD48
0179:FFA4
017C:9A1C
017C:9E7C
017D:0338
0188:D6BC
01D6:4473


the smile faces are D


for gb 2.3.3
 
Last edited:
  • Like
Reactions: Android.Junkii

jraz305

Senior Member
Jun 4, 2011
350
21
update

so unless we have access to cdma 3.5 we are **** out of luck can some one concurr
 

nukedukem

Senior Member
Jun 23, 2010
477
54
Like someone said earlier, downgrade your radio. If you are getting reboots while scanning you are going out of range. You need to find the exact ranges for your phone perhaps. My phone had memory addresses outside of the typical range everyone posts.
 

jraz305

Senior Member
Jun 4, 2011
350
21
found some meid lerned how to scan

post the meid locations .. i have the esn locations which are

ESN addresses:
00FD:2DC8
00FD:4694
00FE:581C
00FF:581C
0127:DCCC
015F:AD48
0179:FFA4
017C:9A1C
017C:9E7C
017D:0338
0188:D6BC
01D6:4473
the smile faces are D
for gb 2.3.3

found some meid locations any one want to contribute
MEID
0X00FB45A0
0X00FD5960
0X00FE0520
0X0015EFF30
0X0015EFF20
0X0015EFF30
0X0017C9ED0
0X0018F21A0
0X001902430
 

Top Liked Posts

  • There are no posts matching your filters.
  • 2
    A lil somethin 4 da community!
    worked for me
    hw 0004
    was at 2.2 with 2.15.00.11.15 radio couldn't do anything with that but
    i upgraded to 2.3.3 rooted with 05.02 radio

    based on Radio 2.15.00.05.02

    cdmaws:scan 0150-01DC for floating ESN addresses

    with QXDM (f4) zero out PESN not "MEID" (not just yet) addresses that were found on the new scan
    Zero out ESN from PESN addresses below:


    00FD2DC8 - pESN
    00FD4694 - pESN
    00FE581C - pESN
    0114DD53 - pESN
    0114DF63 - pESN
    0127DCCC - pESN
    015FAD48 - pESN
    0179FFA4 - pESN
    017C9A1C - pESN
    017C9E7C - pESN
    017D0338 - pESN
    017D1234 - pESN
    017DE3A8 - pESN
    017E0E80 - pESN
    0188D6BC - pESN
    01D6B473 - pESN

    in QXDM send command "RequestNVItemRead ESN"
    should display "00000000"

    now proceed and zero out MEID ESN inlcluding the ones that were found on the new scan:

    00FB45AC - MEID
    00FD5968 - MEID
    00FE0528 - MEID
    015EFF2C - MEID
    015EFF38 - MEID
    017C9ED0 - MEID
    018F21AC - MEID
    018F2288 - MEID
    01902438 - MEID
    01D63E2C - MEID
    015EFF2C - MEID
    015EFF38 - MEID
    017C9ED0 - MEID
    018F21AC - MEID
    018F2288 - MEID
    01902438 - MEID
    01D63E2C - MEID

    after run commands
    "RequestNVItemRead meid” and "RequestNVItemRead ESN"
    both should display 0000000000000

    full power off your phone and take off battery for a few seconds
    power it back on
    now zero out all MEID ESN as they will return
    then run command "RequestNVItemRead meid" and "RequestNVItemRead esn"
    should both display 00000000000
    In the field "Command" enter: "RequestNVItemWrite meid 0x&&&&&&&&&&&" replacing the "&"s with MEID

    don't power off phone yet run another check by
    running command "RequestNVItemRead meid" and "RequestNVItemRead esn"
    ESN should display successfully
    now reboot

    ##786#
    reset or restore
    allow ota provisioning
    should be okay
    might have to check profiles if anything

    good luck

    This is the right method. It's very simple if you remember you have to scan for the extra esn floating a round. I usually just scan 01D0:0000 - 01D9:FFFF. That will pop up the 2 or 3 you need. Also so you don't zero them out one by one by one. I prefer to write a script. I'll give you guys one block and just copy and paste this and replace the ****:**** with the memory location

    This is to check the locations first to verify the esn is there if you want

    PEEK DWORD 00FD:2DC8 1

    IT SHOULD DISPLAY YOUR ESN IF IT'S IN THAT MEMORY LOCATION

    THIS WILL WRITE ZEROS TO THE SAME LOCATION WHICH IS WHY I LIKE TO CHECK WITH PEEK BEFORE I WRITE WITH POKE

    POKE DWORD 00FD:2DC8 0X0

    Just copy the poke command and replace the memory locations

    POKE DWORD ****:**** 0X0
    POKE DWORD ****:**** 0X0
    POKE DWORD ****:**** 0X0

    Copy this as many times as you have the esn location around 12 then put it in a text file. Name it esn.scr and in qxdm "run esn.scr"

    Automation is quicker. But also if your not careful it can automatically mess your stuff up

    Hit the thanks if this was helpful
    Sent from my PC36100 using XDA Premium App
    2
    ok so does anyone have a full list of MEID and ESN locations for GB 2.3.3 that they can list out in this thread?
    A lil somethin 4 da community!
    worked for me
    hw 0004
    was at 2.2 with 2.15.00.11.15 radio couldn't do anything with that but
    i upgraded to 2.3.3 rooted with 05.02 radio

    based on Radio 2.15.00.05.02

    cdmaws:scan 0150-01DC for floating ESN addresses

    with QXDM (f4) zero out PESN not "MEID" (not just yet) addresses that were found on the new scan
    Zero out ESN from PESN addresses below:


    00FD2DC8 - pESN
    00FD4694 - pESN
    00FE581C - pESN
    0114DD53 - pESN
    0114DF63 - pESN
    0127DCCC - pESN
    015FAD48 - pESN
    0179FFA4 - pESN
    017C9A1C - pESN
    017C9E7C - pESN
    017D0338 - pESN
    017D1234 - pESN
    017DE3A8 - pESN
    017E0E80 - pESN
    0188D6BC - pESN
    01D6B473 - pESN

    in QXDM send command "RequestNVItemRead ESN"
    should display "00000000"

    now proceed and zero out MEID ESN inlcluding the ones that were found on the new scan:

    00FB45AC - MEID
    00FD5968 - MEID
    00FE0528 - MEID
    015EFF2C - MEID
    015EFF38 - MEID
    017C9ED0 - MEID
    018F21AC - MEID
    018F2288 - MEID
    01902438 - MEID
    01D63E2C - MEID
    015EFF2C - MEID
    015EFF38 - MEID
    017C9ED0 - MEID
    018F21AC - MEID
    018F2288 - MEID
    01902438 - MEID
    01D63E2C - MEID

    after run commands
    "RequestNVItemRead meid” and "RequestNVItemRead ESN"
    both should display 0000000000000

    full power off your phone and take off battery for a few seconds
    power it back on
    now zero out all MEID ESN as they will return
    then run command "RequestNVItemRead meid" and "RequestNVItemRead esn"
    should both display 00000000000
    In the field "Command" enter: "RequestNVItemWrite meid 0x&&&&&&&&&&&" replacing the "&"s with MEID

    don't power off phone yet run another check by
    running command "RequestNVItemRead meid" and "RequestNVItemRead esn"
    ESN should display successfully
    now reboot

    ##786#
    reset or restore
    allow ota provisioning
    should be okay
    might have to check profiles if anything

    good luck
    1
    Start 00fa end 00ff /
    Start 0108 end 01d9

    (Quick search on Google)
    1
    I have only been able to find eight meid locations for the new EVO 2.3.3 update. Google DFS Cdma tool. It's free, you dont have to pirate it and it scans memory and reads just fine. If anyone finds more locations, I would be interested in knowing them. Thanks in advance!
    1
    post the meid locations .. i have the esn locations which are

    ESN addresses:
    00FD:2DC8
    00FD:4694
    00FE:581C
    00FF:581C
    0127:DCCC
    015F:AD48
    0179:FFA4
    017C:9A1C
    017C:9E7C
    017D:0338
    0188:D6BC
    01D6:4473


    the smile faces are D


    for gb 2.3.3