General CDMA Flashing Flexing K1m Telus

From Guides

First off i want to say this guide is from Mark Ventures site one of the Verizon Motorola phone hackers, I just added some things to help out Telus k1m users since the Telus process is different. So thanks to Mark Venture and everyone that helped make that Verizon K1m guide.

Contents 1 You'll Need: 2 STEP 1 backing up your phone. 3 2. FLASH THE PHONE's FIRMWARE. 4 HOW TO FLASH:

You'll Need:

1. USB Cable (included in Krzr bundle from TELUS)
2. Install the Motorola USB Modem drivers.
3. Install and configure Motorola PST v7.25 and its drivers
4. Install P2KSeem for V710. (To install P2KSeem for V710.. Just unzip all the files in the archive you downloaded to a folder. It does not need to be "installed." There is no "setup" program.)
5. Alltel Firmware flash file.. (obtain from http://www.humpa.com/vzw or http://ryfiles.com/flash )
6. QPST v2.7 Build 215 or higher (sorry, no links, warez)
7. Install and configure QPST along with its requirements
8. Install/Configure P2KCommander along with its requirements (optionall)
9. You may want to backup your spark icons, etc.
10. RadioComm v10.3.1 (sorry, no links). NOTE: some have mentioned difficulties when using newer versions of Radiocomm
11. RadioComm v10.3.1 requires MS .Net Framework v2. (you can use windowsupdate.microsoft.com to download)
12. BitPim

STEP 1 backing up your phone.

Prior to completing these backups your phone must be running the Telus Firmware before backing up type *22803 (you will get the Telus automated activation system) press 1 for english or 2 for french, then push 1 to program your phone. After that do the same thing but press 2 to upgrade your prl.

OPTIONAL: backup the file system... (Use BitPim to capture tree to zip file. Uncompress ZIP on PC. go folder by folder comparing PC's copy to phone's file system view in bitpim, make note of missing files/folders. Use P2KCommander and QPST to get the rest.) You many not be able to backup All files/folders this way. This is not actually needed, but some like to do it, "just in case"....

-- REMMEBER FALSHING THE PHONE WILL ERASE EVERYTHING BEFORE FLASHING BACKUP PICS, CONTACTS, RINGTONES VIDEOS, ETC --

The following are MANDATORY:
You must now backup the settings, config files, etc... which WILL BE NEEDED to restore later... NOTE: These files are essential to restoring your phone to a working state! Do not proceed to flashing if you are unable to back up ANY ONE of these items!

Before doing anything just to save you some time: push MENU>PHONE INFO> OTHER INFORMATION: ESN and write that down

now for the rest:

Open P2Kseem for v710 type in bytes: 7a Seem: 0055 Rec: 1 Now click read from phone after it reads the seem from the phone you should see the seem displayed (bunch of zeros and some numbers) now click save to file and save it to your pc (DON’T CHANGE THE NAME). On that seem their should be a 6 digit code (right side of seem with dots after it) write that code down somewhere. Do the same thing again but, put in bytes: 0 Seem: 2742 Rec: 1 and save that to your pc also.

Use Qualcomm QPST to backup service programming..... Unplug your phone from the PC, power it off, then back on, and re-connect it to the PC. Use the QPST Configuration program, make sure your phone is displayed/available... Select the port with your phone, then use the Start Client pull down, select Service Programming. At the phone selection screen, your phone should be listed and highlighted, click OK. Click the READ FROM PHONE button. On the "Enter Service Programming Code" screen, enter the six digit code you wrote down earlier, and click OK. When the read is complete, and you see values filled in, click the SAVE TO FILE button. The file name box will automatically be filled in as your phone's ESN number followed by _SP... (example: 1A3333Ad_SP) click the Save button. Click on the Connection pull down in QPST Service Programming, and click EXIT. Exit the QPST Configuration program. Unplug the phone, power it off, then back on. Use Motorola PST to backup additional files.... Unplug your phone from the PC, power it off, then back on, and re-connect it to the PC. Start PST Phone Programmer. Use the File pull down, and click on NEW. Select BREW File, and click OK. Use the Phone pull down menu and click on READ. When the PST Phone Programmer Progress window indicates the Read Procedure has completed successfully, (it says "It's now safe to disconnect the phone"), close that progress window. In the PST Phone Programmer window, use the File pull down menu, and click SAVE AS... name the file, and click save... Repeat the process using PST to backup each of the following... CDMA Enhanced Roaming Indicator (ERI) File, CDMA NAM File, CDMA Preferred Roaming File, Feature File, Mobile IP File (NOTE: you might get an error stating this may or may not be supported, click YES to continue, it will report Partially completed), MMS Data File, RTT Data File and RTT Browser File (NOTE: have Ver 6.x tab selected before you click READ FROM PHONE).NOTE: Not all of the PST backups will be used for this process, but they are good to have "just in case..." NOTE: You do not need to exit PST, or unplug/poweroff/poweron/replug between READ operations.

Use RADIOCOMM to backup seems.... Download this table -> MonsterSeems.NVM. (Right Click -> Save Target As... and make sure it doesn't end up getting a .TXT appended to it)
Unplug your phone from the PC, power it off, then back on, and re-connect it to the PC.
Start RadioComm.
If prompted about the Moto Driver Installation setup, click CANCEL. i.e. do NOT run the Moto Driver Installation...
Inside RadioComm, use the Main pulldown menu. Select MA -> CDMA1X -> 6500 Chipset Base
Use the Settings pull down menu. Select USB -> M-Link USB Driver.
In the Main RadioComm window, click on the P2K 1 tab. The PC should "beep", and you should see the Radio Detection change from a blue ciricle to a Green circle.
Use the Features pull down menu. Select NV/Seem.
In the TABLE box, click the OPEN button. Browse to the MonsterSeems.NVM file you've downloaded, select it, and click OK.
In the Action box, click the READ button.
When the read has completed, in the Table box, click the SAVE button. File name will default to your phone's ESN number. Example: A123455.
Close the seem window using the X in the upper right, then exit out of RadioComm.
Unplug the phone, press and hold the power button, the screen will blink. Then turn the phone back on.
Note: you may have to remove/re-insert the phone's battery to turn it back on.
That table file will backup EACH of the following seems...
Seem 04aa Bytes 7A Record 0001
Seem 038e Bytes 7A Record 0001
Seem 01d1 Bytes 7A Record 0001
Seem 29a0 Bytes 40 Record 0001
Seem 29c0 Bytes 7a Record 0001
Seem 2976 Bytes 40 Record 0001
Seem 2977 Bytes 40 Record 0001
Seem 2978 Bytes 40 Record 0001
Seem 2979 Bytes 40 Record 0001
Seem 2994 Bytes 60 Record 0001
Seem 2995 Bytes 60 Record 0001
Seem 2997 Bytes 20 Record 0001
Seem 299a Bytes 70 Record 0001
Seem 299b Bytes 70 Record 0001
Seem 29a1 Bytes 20 Record 0001
Seem 29a9 Bytes 40 Record 0001
Seem 29b2 Bytes 30 Record 0001
Seem 29b3 Bytes 30 Record 0001
Seem 29b6 Bytes 20 Record 0001
Seem 29ba Bytes 60 Record 0001
Seem 29bb Bytes 60 Record 0001
Seem 29bc Bytes 40 Record 0001
Seem 29be Bytes 90 Record 0001
Seem 29bd Bytes 90 Record 0001
Seem 29e9 bytes 82 Record 0001
Seem 01d2 bytes 7A Record 0001

Use BitPim to backup the following files..
/dmu/10.key
/nvm/seem/cdma_sec NOTE: K1M users may not be able to back this file up... in that case, seem 01D2 contains this data!


(im not even sure you need to backup the 10.key file if you have it on your phone back it up if not don’t worry about it)

2. FLASH THE PHONE's FIRMWARE.

If you were unsuccessful backing up ANY of the files in section 1, please STOP and DO NOT FLASH YOUR PHONE!!! -- REMMEBER FALSHING THE PHONE WILL ERASE EVERYTHING BEFORE FLASHING BACKUP PICS, CONTACTS, RINGTONES VIDEOS, ETC --

HOW TO FLASH:

How to Flash your phone's firmware.
I know there are already some good guides on flashing your phone with the different firmwares, but each walks you thought as part of some "Bigger process"... so its more geared towards that process, lists all the pre-reqs for that process, etc..
This is the straight GENERIC process to flash your phone with ANY firmware.... It is based upon -> Flashing a Verizon V3c to Alltel which was part of a guide to flash to the Alltel firmware, as such, contained extra pre-reqs and the other steps to make the Alltel V3C firmware work on Verizon phones.
WARNING: Flashing with firmware not intended for your particular phone could render it useless or inoperable and it may NOT be possible to recover. Please be sure to only use flash files meant for your phone/carrier, or that you know will work on your phone.
WARNING: Flashing with firmware from a different wireless carrier (example: Flashing a Verizon phone with Alltel firmware, and wanting to still use it on Verizon's network) may either BRICK YOUR PHONE, OR just require additional work to get all features (i.e. data services, WAP, MMS Messaging, Get-It-Now) working again. Please be aware of what is involved BEFORE you flash with another carrier's firmware!!
WARNING: If you flash your phone with firmware from a different carrier, your current wireless carrier will NO LONGER support you, and will most likely void any warranty on your phone.
WARNING: In most cases, flashing will erase all personal data, contacts, pictures, ring tones, games, applications, etc. stored in the phone's memory. Please be sure to back up this information PRIOR to flashing. (NOTE: Due to Get-It-Now and BREW, it may not be possible to backup games/applications installed on your phone.)
NOTE: there are Upgrade Flash files and Monster Flash files available. Monster Flash files will completely erase and re-write your phone's firmware and file system, removing all traces of the previously installed firmware. It will revert your phone to a "fresh out of the box" state. Use an Alltel Monster Flash on a Verizon phone, and you've turned your phone into the same thing as a phone "Fresh out of the box" from Alltel. UPGRADE Flash Files leave the current file system in place, and put the upgraded files onto the phone. In many cases this results in "hybrid" firmwares, or "left over files" still on the phone. Upgrade Flash files will not revert you to a "fresh out of the box" state. So if you are trying to recover from a catastrophic failure, you'll want to use a Monster Flash File if one is available.
Required... if you were refered to this page by another process, you may already have these pre-req's in place.
1. USB Cable (see the FAQ)
2. Install the Motorola USB Modem drivers.
3. Install and configure Motorola PST (v7.23 or higher) and its drivers, along with testing its connection (Formerly known as the Prep-work section of the Seem Edit page).
4. Firmware flash file.. (obtain from http://www.humpa.com/vzw or http://ryfiles.com/flash )


NOTE: its possible to flash the phone with RSD or RSDLite also, however, they are slightly different programs, as such would use a different process.
The Process...
NOTE: if trying to recover a phone by reflashing, you may need to put your phone into Boot Loader mode... this is usually accomplished by pressing/holding * and # keys while using the power button to turn the phone "on".
Get Started...
Install the software and drivers as listed in the requirements section above. Download/unpack the firmware file you wish to use on your PC. Unplug your phone from the PC, power it off, then back on, and re-connect it to the PC.
FLASH THE PHONE's FIRMWARE…(writing for verizon phones just ignor the verizon stuff)


Please be sure your battery is fully charged! You do not want to run the risk of the battery dying mid flash!
Use PST's MultiFlashFlex (MFF) application to flash the phone (note: the PST install process usually does not create an icon for MultiFlashFlex on the start menu. So if there is not an icon on your start menu, launch via c:\Program Files\Motorola\PST\MultiFlashFlex.exe )
In the Flash Setup area of the MultiFlashFlex program window, check the box for Enable Flash, and use the Browse button to locate and select the .SHX file for the firmware file you have downloaded.
In the Flex Setup area of the MultiFlashFlex program window, make sure the box for Enable Flex is UNCHECKED.
In the Preferences area of the MultiFlashFlex program, check the boxes for Override even if newer, Master clear and Master Reset.
Example Screen Shot -> MFF1.jpg
Click the Start button.
NOTE: you might see an "invalid ESN" message as MFF switches the phone into FLASH mode. This is normal.
NOTE: The first time you flash your phone, the Add New Hardware Wizard may run and try to install the drivers for the FLASH INTERFACE. If it does not find the driver automatically, point it to the drivers you downloaded/unziped before (the DriverPack) as part of the installing PST pre-req.
When the flashing process is complete, the Status column in the lower portion of the MultiFlashFlex program window should show Successful, and the phone should restart itself. Once the phone has restarted itself, MFF will report CONNECTED in the Status Column. It is now safe to disconnect the phone.
You may now exit MFF.
Unplug your phone from the PC. If the phone is in the powered off state, power it back on.
Perform a Master Reset, and Master Clear. On the phone... Menu -> Settings -> Initial Setup. Highlight Master Reset, and press the soft menu key to Select. When prompted for Security Code, enter 000000 or your phone's SPC (the 6 digit code i told you to write down) . Press the soft menu key for OK. When prompted to "reset all phone settings?" press the soft menu key for YES. The phone will restart itself. Repeat the same steps selecting Master Clear.
You are now complete.
Your phone is now successfully flashed. You are ready to proceed to activating your phone, or any required work to make the phone functional on your wireless carrier's network.

after your phone finishes restarting and boots up with the altel firmware go into MENU>TOOLS>AIRPLANE MODE> and then turn airplane mode on

Note: whenever asked for a phone spc/master subsidy code/ service code atc while restoring just type in that 6 digit code i told you to write down if that doesn't work just put all zeros.
3. Restore the backups you created earlier...
NOTE: Please now manually backup your ALLTEL 2742 bytes 0000 record 1 seem using P2kSeem before you proceed!!!
3a.Use Qualcom QPST to Restore service programming..... Unplug your phone from the PC, power it off, then back on, and re-connect it to the PC. Use the QPST Configuration program, make sure your phone is displayed/available... Select the port with your phone, then use the Start Client pull down, select Service Programming. At the phone selection screen, your phone should be listed and highlighted, click OK. Click the LOAD FROM FILE button. Navigate, find and select your ESN#_SP.QCN file you created earlier. Click OPEN. Click the WRITE TO PHONE button. On the "Enter Service Programming Code" screen, enter the six digit number you wrote down, and click OK. When the write is complete, click on the Connection pull down in QPST Service Programming, and click EXIT. Exit the QPST Configuration program.
Unplug your phone from the PC, power it off, then back on, and re-connect it to the PC.
3b. Use Motorola PST to Restore additional files.... Start PST Phone Programmer. Use the File pull down, and click on OPEN. Select BREW File, and click OK. Browse for, and select your previously backed up file. Use the Phone pull down menu and click on WRITE (dont use you're backed up BREW file i've attached the brew file i want you to write to the phone). When the PST Phone Programmer Progress window indicates the WRITE Procedure has completed successfully (it says "It's now safe to disconnect the phone"), close that progress window.
Repeat the process using PST to restore each of the following that you backed up earlier... CDMA ERI File, MMS Data File, and RTT Data File. Note: RTT Browser File will be edited/restored in a later step so do NOT do it now...
OPTIONAL PST RESTORES: Due to using QPST to backup/restore the Service Programming, you should not need to restore the following files at this time... CDMA NAM File, CDMA Preferred Roaming File, Feature File, and Mobile IP File (NOTE: you might get an error stating this may or may not be supported, click YES to continue, it will report Partially completed). If you experience problems... then restore these files.
3c. Use RADIOCOMM to restore your seems.... NOTE: this will write the 2742 Seem that was on your phone when the backup was run.. So, if you ran the backup while the TELUS firmware was on your phone, it will restore the TELUS 2742 seem to your phone... as such.. Please Stop now, use P2KSeem for V710 to backup your ALLTEL 2742 seem file BEFORE you use RadioComm to restore the seems.

Start RadioComm.
If prompted about the Moto Driver Installation setup, click CANCEL. i.e. do NOT run the Moto Driver Installation...
Inside RadioComm, use the Main pulldown menu. Select MA -> CDMA1X -> 6500 Chipset Base
Use the Settings pull down menu. Select USB -> M-Link USB Driver.
In the Main RadioComm window, click on the P2K 1 tab. The PC should "beep", and you should see the Radio Detection change from a blue ciricle to a Green circle.
Use the Features pull down menu. Select NV/Seem.
In the TABLE box, click the OPEN button. Browse to the ESN .NVM file that was created in the backup steps (example: A123455.NVM) , select it, and click OK.
In the Action box, click the WRITE button.
When the WRITE has completed...
Close the seem window using the X in the upper right, then exit out of RadioComm.
Radiocomm leaves the phone in the correct mode for P2KSeem to connect, so perform the following seem edits...

3d. NOTE: V3M/K1M Only: Use P2KSeem for V710 to edit the 01D0 seem, selects the second M.IP Profile.
Fill in Seem: 01d0, Bytes (h): 7A, Record: 1
Click Load from phone.
Find Offset: 00
Check the box for Bit: 0 which sets the Hex value of the offset to 01
Click Save to Phone.

. Edit and restore RTT Browser file.
When using the default Telus config files, you need to create a new Web Session on your phone to handle the MMS/PIC Messaging, you may also need to edit the USER ID field of the default TELUS web session.
If you are using backups from an already 100 % working Alltel flashed phone, these settings may be configured properly so do these steps just to VERIFY... However, when using backups from TELUS firmware, these steps are Mandatory!!
Unplug your phone from the PC, power it off, then back on, and re-connect it to the PC. Start PST Phone Programmer. Use the File pull down, and click on OPEN. Select RTT 1x-Browser, and click OK. Browse for, and select your previously backed up file.
Click on the Version 6.x tab.
On the Proxy 1 tab, change the User ID to XXXXXXXXXX where xxxxxxxxxx is your 10 digit phone number. (NOTE: this is a step I have not had to do, but others have.) Leave the other fields untouched.
For the Password put your ESN: which can be found on the back of your phone behind the battery after HEX:
Now look for something that says DOMAIN for domain put microbrowser.telusmobility.com
So username: your 10 digit phone number
Password; your esn
Doamin: microbrowser.telusmobility.com

After putting those in look for NA ID 1:
After finding NA ID 1: put
XXXXXXXXXX@microbrowser.telusmobility.com
(is your 10 digit phone number)


Now write this to your phone by clicking the “phone” tab then clicking write.

After writing click phone then restart.

Now go into p2kseem for v710: put in
BYTES: 7A
SEEM: 0055
REC: 1

Then click load from file and find your backed up 0055 seem after you find it click open
After its loaded push save to phone wait a couple of seconds
Now do the same thing but put in Bytes: 0 Seem: 2742 Rec: 1 and then save that backed up one onto the phone also wait a couple of seconds then click restart phone.

Now that the phone is powered on go to MEENU>TOOLS>AIRPLANE MODE
And turn airplane mode off

Now your phone will search for the TELUS 1x/EvDO network
After you see either a 1x or an EVDO icon
Push *22803 then SEND
Now it will ask if you want to do an activation push YES
Now it will connect you to the TELUS automated phone programming system
Select 1 for English
Then select 1 to program the phone

After programming the phone:
Push *22803 again and then send
Now select 1 for English
And then select to upgrade the phones PRL

After you’re done updating the prl push

1. 1. DEBUG (33284)
      

Now push end then push clear then the left soft key.
The screen should be white
Now push the right soft key 3 times
Now go down 9 rows until your at HDR PREF
Push the right soft key 2 times so that the word on the right of HDR PREF says cdma
Now push the right soft key to exit
The phone should restart
After restarting push ##DEBUG again to deactivate test mode

Now you should have a 1x/D indicator
And you’re phone should be on the TELUS NETWORK working perfectly in 1x/ D (there the same thing)
And now you can enjoy your flashed TELUS phone

this isn't a very good guide i used marks guide just added some steps to get it workin good on telus
if you have any questions let me know
there might still be some verizon phone referances in this guide just ignor them.