Randomwit's ULTIMATE CRICKET TREO GUIDE

by The Boss on August 20, 2009

HERE IS THE ULTIMATE GUIDE for FLASHING ANY TREO 650-755 to CRICKET

***DISCALAIMER*** As with any modifying of a cell phone or PDA, you can damage or destroy your device. I take no responsibility for any damage caused to your device in any way.

WARNING!!! Please do a complete nv backup before you attempt any rom flash or advanced programming such as hex editiing nv items. Keep a copy of that nv backup hidden safely on your computer. Failure to do this may result in an inability to fix problems that may occur with the device’s radio due to programmer error, or that may just occur.

PALM OS TREO (650, 700p, 755)

Programming your Treo:

1. Getting your SPC/MSL code: If you have a Verizon or Alltel Treo, then your SPC/MSL is set to all zeros (000000). If you have a sprint Treo, then you will need to find that code.

a. Place your device in Passthrough mode by dialing ##DIAG# on a sprint Treo. Rhe code changes depending on what type of Treo you have. Just remember that each code has an initial command, then the code, and then a terminal command. The initial commands are ## or #*#. The terminal commands are # or the “Send” button. For example, on a Verizon Treo, the code could be #*#DIAG# or #*#DIAG-Send. The code “DIAG” is actually 3424 on your dial pad. That spells DIAG. All codes will be listed that way except the ##SPC# code, that actually means to enter the SPC code in place of the letters.

b. Once in Passthrough mode, connect your device to your programming cable (you must install the prolific drivers first), and use Bitpim to read filesystem and navigate to nvm\nvm\nvm_security on open the file. One of the six digit numbers in that file is your SPC. Write those numbers down and close Bitpim.

2. Loading a PRL and changing the SPC: Open QPST and connect to your Treo. Click “Read from Phone” and enter your SPC when prompted. On the settings tab you can change your SPC to “000000” or whatever you would like it to be. Go to the roam tab and click “Browse” and then navigate to the PRL file that you would like to load. Now click “Write to Phone.”

3. Programming the NAM: On your Treo dial ##SPC# (remember that the code are different for different carriers). This will allow you to enter your MDN, MIN, SID and NID.

4. Setting up Mobile Web: “Go to Prefs\Network” and hit “Menu” key or tap the top left of the screen. Select “Options\View Log” and this will open the log. Type “?” (no quotes) and hit “Enter” key, hit “Enter” key again, and then type “pdpset 1” (no quotes) and hit “Enter” key again. Phone should respond something like “pdpset 1 set successfully.” Now go back to “Prefs\Network” and press “Menu” or tap top left of screen and select “Service\New.” There are two methods to setup your connection here and they are listed below. The first is the most common.

a. Method 1:
i. Service: Cricket Web
ii. Connection: High Speed Wireless
iii. User Name: your10digitphonenum@mycricket.com
iv. Password: cricket
v. Click on Details, uncheck Mobile IP, then OK
vi. Click on Connect to establish a connection

b. Method 2:
i. Service: Cricket Web
ii. Connection: Virtual Modem
iii. User Name: your10digitphonenum@mycricket.com
iv. Password: cricket
v. Phone: #777
vi. Click on Details\Advanced\Script
vii. Enter the following script:
1. Send: at$qcmdr=3
2. Send CR:
3. Send: at$qcqnc=0
4. Send CR:
5. End:
viii. Click OK, then OK
ix. Click on Connect to establish a connection

5. Enabling Proxy in Blazer: Open Blazer and stop it from connecting. Press “Menu” key or tap top left of screen. Go to “Options\Preferences\Advanced” and click “Set Proxy.” Check “Use custom proxy” and enter “Proxy Server: wap.mycricket.com” and “Port: 8080” and click “OK.”

Cableless Flash for Treo 650&700p

Place the CDMAFirmwareUpdater.prc file in “Storage Card\Palm\Launcher” and insert card. Don’t worry if the icon for the app is just a blank square (that’s normal). Click the app to open it, but DO NOT HIT THE “UPDATE NOW” button yet. Press the “Menu” key or tap the top left of the screen and select “Debug,” then uncheck everything except “Update PRL” and click “OK.” Now you can click the “Update Now” button. Just follow the rest of the steps above to program NAM and Web and your Treo is officially Cricket.

*Note* This method will only work on a Sprint Treo if you have your SPC

Extended Info on SD Flashing and Getting SPC via SD Card

Credit goes to thenobilemobile:

http://howardforums.com/showthread….00&page=1&pp=15

This concludes programming a Palm OS Treo on Cricket’s network with working web.

WM TREO 700w, 700wx

Steps 1-3 are the same as above, aside from one big difference. When you are completing step 2 with QPST, you need to go to the MIP tab and change the “Mobile IP Behavior” to “Simple IP Only.” This option will not be available on the WM Treo as it was with the Palm OS.

The only other differences noticed are that your device will reset when you enter the ##DIAG code and then you will have to enter it again after the Treo reboots. Also, these models go into DIAG mode rather than Passthrough mode. It is the same thing.

4. Setting up Mobile Web:
Go to “Start\Settings\Connection\Connections\Advanced\Se lect Networks” and select “My Work Network” for both connection types. Go back to Start\Settings\Connections\Connections and select “Add new modem connection” and enter:
a. Name: Cricket Wap
b. Modem: Cellular Line
c. Number: #777
d. Username: your10digitnumber@mycricket.com
e. Password: cricket
f. Domain: *nothing goes here*
g. Click “Finish”
7. Now select “Edit my proxy server” and enter:
a. Check “This network connects to the internet”
b. Check “This network uses a proxy server…”
c. Proxy Server: wap.mycricket.com
d. Click “Advanced”
e. Make sure all server addresses are wap.mycricket.com and that all ports are 8080

Mobile IP Behavior Reverts to MIP from SIP

Fix: After you set the Mobile IP Behavior to Simple IP Only using QPST, exit DIAG mode. When your Treo boots up, DO NOT launch Internet Explorer! Immediately run the CDMAUpdater.exe and hit the “Update” button. You do not need to select anything. This will create and restore a backup of your filesystem and all of the settings within, making the Treo think that the default setting is Simple IP Only.
*Note: You will have to rewrite the PRL to the phone as it will e replaced with the Verizon PRL.

Flashing a 700w/wx from Sprint Firm to Verizon Firm

Flashing the Rom:
1. Connect Treo with regular USB cable…
2. After it connects put it in bootloader mode by dialing ##UPST#…
3. Make sure that your pc detects and installs the new device…
4. Dump the Rom (desktop updater), by using winrar to extract the contents of that updater, in a folder and name the folder 700wx…
5. Copy that folder directly to your C: drive…
6. Now open a command promt by going to Start\Run and type “cmd” and hit enter…
7. In the command window type “cd C:\” and hit enter…
8. Then type “cd 700wx” and hit enter…
9. Now type “ruucmd.exe -v -t -asyncoff -asyncon FwAndRom.ruu” exactly as it is here…
10. It should initialize and ask you to “press any key to continue”…press space bar…
11. It should take a long time to (20-30 minutes) to flash the rom but you’ll know if it’s working…
12. After the flash the device will show the Treo screen…if it stays here too long, you can hard reset and then wait a minute for it to startup…
13. To hard reset you press and release the reset button by the battery while holding the power (red) button…
14. I had to do this twice because I’m impatient…
15. Now you just need to reset PRI to clear out any last Sprint stuff…

PRI RESET:
1. Dial ##774#, #*#774#, or #*#774(Talk)…
2. Now a menu will come up and you just hit reset…

All credit for this find goes to beezlewaxin. He is the first person that I know of that had this solution working. If there was someone else before him, then credit belongs to them as well.

MMS and EVDO on VERIZON 700w, 700wx

1. Copy the provided “nvBackup.dat” file to the root of your Treo (ie. in \Device).
2. Open the CDMAUpdater.exe app from your storage card, but DO NOT run it yet. Press the “Menu” button and uncheck “Backup” but leave “Restore” checked. It will tell you to make sure that you have a backup, click “OK.”
3. Click “Update”
4. Now you will need to rewrite the PRL to your phone using the programming cable.
5. Next, use QPST-EFS Explorer to copy your nvm_data, nvm_hdr, and nvm_palm0 files to your computer.
6. MAKE A BACKUP OF THESE FILES!!! ALWAYS KEEP A COPY OF ORIGINALS!!!
7. Open each file in a hex editor. For any instance that you see aphonenumber@vzw3g.com you need to change the hex value just before that entry, on the hex side of the editor, from 14 to 18; then you need to change the entry on the ASCII side of the editor to your10digitnumber@mycricket.com. For any entry you see that has anynumber@mycricket.com and it is not your number, you need to just change the number in that entry to your10diginumber@mycricket.com. After editing each file, you must save it. You will notice that the settings for MMS in the nvm_palm0 file have already been changed to cricket by running the updater. You DO NOT need to edit any entries below the MMS settings in the nvm_palm0 file. I have probably gone a little overboard and edited too many already.
8. The last thing that you need to do to get MMS working is to make an “Exception” for the server. Go to “Start\Settings\Connections\Connections\Advanced\E xceptions” and add the following exception: mms.mycricket.com/*
9. FYI- You will need to load an EVDO PRL and be in an EVDO are for that service to work.

*Note: These steps for EVDO work for Palm OS models as well, but the method is a little different. You are welcome to attempt hex editing anything you like on your other Treo models, but remember to keep a backup or you may be sorry. The MMS edit to the nvm_palm0 file also allows for MMS to send (not receive) on Verizon Palm OS Treos.

***CREDITS***
Many thanks to Tech_Guy40 for all his help when I first started hacking Treos. Thanks to beezlewaxin for the RUU hack and countless Cricket hacks that no one has ever found before. Thanks to shadowmite, kocoman and kshah for more Treo work than anyone else in existence (even Palm).

**TOOLS**
The most important tool you can have for flashing treos is the programming cable. If you would like to buy a programming cable, please use the “Contact” page above, and tell us that you would like to buy a cable.

Download the Ultimate Cricket Treo Tools Here

I hope you guys enjoy this. I have kept it secret long enough. It’s time to let the masses start getting all that their treos have to offer on Cricket.

Credit: Randomwit

Leave a Reply