Qtek 8500 unlock - HTC Startrek

Hello,
I need help unlocking (simlocked - pda is working) Qtek 8500 from austrian "ONE" provider. Also, I need to change language (from german to english). Since I am new in this windows based phones, I would appreciate any help u people can provide me...
I cant unlock it online, since I dont have paypal account. My country is not listed.
THANK YOU.
Dejan

Here is CID unlocking procedure, that was posted few days ago by Zone-MR. I have unlocked my Qtek8500 and installed a new ROM version 3.6.251.0. :
1. Application unlock your phone using regeditstg and do the following :
HKEY_LOCAL_MACHINE\Security\Policies\Policies\0000 1001 = 2 -->Change the value data from 2 to 1
HKEY_LOCAL_MACHINE\Security\Policies\Policies\0000 1005 = 16 --> Change the value data from 16 to 40
HKEY_LOCAL_MACHINE\Security\Policies\Policies\0000 1017 = 128 --> Change the value data from 128 to 144
Reboot the phone
2. Run SDA_ApplicationUnlock tool. Reboot the phone after it finishes.
3. Download itsutil.zip from http://www.xs4all.nl/~itsme/projects/xda/tools.html , version from 2005-6-28. There is even newer version, but with that version you can not use pdocread without arguments.
4. Connect the phone with activesync
5. Run Command Prompt, go to subfolder named "build" in itsutils folder, and run pdocread without arguments
6. Note the value of "uniqueid". It will be something like : "00 00 00 00 12 03 02 14 3b 07 1b b2 04 05 07 54"
7. run pdocread again with these arguments : "pdocread -n 1 0x000000 0x10000 -b 0x4000 original-bdk1.nb". This will make original-bdk1.nb file in build folder (where the pdocread is located).
8. Upload this file and value of uniqueid to http://www.spv-developers.com/strtrkCID/. It will open a new page after few seconds. Go to bottom of the page and click the link "Download patched BDK1"
9. Download the file (it will be named like "supercidxxxxxxx.bin) to "build" folder
10. Run the pdocwrite from command prompt with these arguments : "pdocwrite -n 1 supercidxxxxxxx.bin 0x000000 0x10000 -b 0x4000". Replace supercidxxxxxxx.bin with the original name of downloaded file from step 9.
11. Wait 15-20 seconds and that is it. Reboot the phone and install the ROM you like

Still not working...
Thank you damird,
I have done everything as you described. Now I have ROM ver. 3.6.251.0 downoaded from ftp.xda...
But my Qtek is still SIM LOCKED!! When I insert sim card, following message appears:
NETWORK IS LOCKED. PLEASE INPUT UNLOCK CODE.
Please help me with this.

IMEI Check
well, i think you have to use the imei check solution
http://www.imei-check.co.uk/f600unlock.php

Cant use imei check
Imei check will be the problem, since my country is not listed in paypal. Simply cant pay it!
Is there any other option?

Paypal
send me the money, i'll pay for you !!!!!

envelope?
All I can do is to send u the money inside trackable envelope. It is not secure, but if I couldnt find other option, I will do that. THANK YOU! It would be 20 GBP, right?
Please wait week or two in order to find another solution... If not, I will contact you.
Thank you again.

How can I find out the value of DOCID?
How can I find out the value of DOCID? What is DOCID?

damird said:
Here is CID unlocking procedure, that was posted few days ago by Zone-MR. I have unlocked my Qtek8500 and installed a new ROM version 3.6.251.0. :
1. Application unlock your phone using regeditstg and do the following :
HKEY_LOCAL_MACHINE\Security\Policies\Policies\0000 1001 = 2 -->Change the value data from 2 to 1
HKEY_LOCAL_MACHINE\Security\Policies\Policies\0000 1005 = 16 --> Change the value data from 16 to 40
HKEY_LOCAL_MACHINE\Security\Policies\Policies\0000 1017 = 128 --> Change the value data from 128 to 144
Reboot the phone
2. Run SDA_ApplicationUnlock tool. Reboot the phone after it finishes.
Click to expand...
Click to collapse
I cannot edit register to change setup, the access id denied....
How can I unlock my phone? Note it is not branded and it works with all SIM, but if I install a new ROM it refuse it...
thanks for the help

Related

How to dump the rom of a G4 ?

Hi
I have here a G4 with the stock OS/rom that really interests me. Its the vodafone PTG rom wich i need to flash on another g4 i have that is in english.
The question is : how can i do a rom from that wizard ?
Thanks !
PS. of course i can upload the rom for anyone who needs if after
First you must know if the phone is CID unlocked
If it is then just get "mtty" and make a "r2sd all"
If it's not then i think you must do it by steps using programs like awizard
cheers
PS:
anyone feel free to correct please
i dont think its cid unlocked, almost for sure that is locked
I Cant Make Full Backup, Need Help (g4) Cingular 8125 Sim & Cid Unlocked
I have tryied everything nothing had worked I'm able to Backup OS & Extended Rom. Not a nubby even doing sd backup happens same thing I can make individual backup like IPL, SPL, Extended Rom, OS ect. But I want full backup and I cant. When I use aWizard it does great job but on the radio.nba part this is the message that comes out. I have tryied everithing all the programs availables on all forum this has been a 8 day proyect please some one can help me. HELP HELP HELP HELP HELP HELP HELP HELP HELP. ITS A CINGULAR 8125 (G4) UNLOCKED SIM & CID BY CHECK-IMEI. PLEASE SOMEBODY ANY ADVISE.
THIS IS DOING IT WITH SD
r2sd all
R2SDBackup() Pls. insert SD card !!
Cmd>r2sd all
***** user area size = 0x3B880000 Bytes
R2SDBackup() - Download type = 5
usTotalBlock = 1 sizeof(SDCARD_SIGNATRUE_TABLE)=512
Start address = 0x80000000 , Length = 0x800
Start address = 0x80000800 , Length = 0xC0000
Start address = 0x800C0800 , Length = 0x40000
Start address = 0x80100800 , Length = 0x280000
GSM - dwSize = 345DF
GSM Page0
Start address = 0x4E3D4C0 , Length = 0x3900000
Start address = 0x743D4C0 , Length = 0xA00000
The read size is not matched, load failed!
Some Image (8) load failed, we can not backup All images...
Cmd>
============== aWizard 1.3 beta 2 ===============
- By ahlok_hk -
__________________________________________
- [Credits] -
- itsme for 'itsutils' -
- MachinaGod for 'RapiUnlocker' -
- MachinaGod for 'lokiwiz' -
- mamaich for 'WM5 ROM editing tool' -
- psneddon and kenu for Logo Converter -
- nicob for scripting tips -
- xda-developers.com, buzzdev.net n oths -
__________________________________________
* Please Choose one of the following options:
a - View README file
e - Enable RAPI (Run this after each hard reset)
u - Unlock CID (!!!PLEASE RUN THIS ONE TIME FIRST!!!)
b - Backup Radio, OS and Extended ROM from device
s - Write Backup Splash Logo (.nba) to Wizard
c - Convert + write BMP(240x320) Splash Logo to Wizard
r - Write Radio ROM to device (!! RUN unlock CID 1st !!)
w - Write OS ROM to device (!! RUN unlock CID 1st !!)
q - Quit this program
__________________________________________
!!! ATTENTION! Please use this tool at your own risk!!!
__________________________________________
* Type letter then press [Enter]:B
* Backup Wizard ROM Version 1.0
* Please enter the name of "folder" to save the ROM image to (e.g. "QT-1_6_3_4-W
WE"), no space pls
* Then press [Enter], or q to to main menu:radio
* Backup Radio ROM? (y/n/q):Y
* Backup OS ROM? (y/n/q):N
* Backup Extended ROM? (y/n/q):N
* Backup Splash ROM and HTC Logo? (y/n/q):N
* Please make sure the following before running this option:
* - your have connected your Wizard to the PC with USB ActiveSync connection,
* - already run the option 'e' at least once after the last time you hard reset
the Wizard
* then press [Enter] to start, or q to main menu:
[14:29:32.28] Backup Radio ROM [ROM\radio\radio-Radio.nba] Start
* This process takes about 5 to 8 minutes depends on CPU Speed.
* Please wait.....
3 partitions, 2 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 39 07 01 06 27 2c 17 3e 17 05 06 ec
CopyTFFSToFile(0x50000, 0x280000, ROM\radio\radio-Radio.nba)
ERROR: ITReadDisk: outbuf==NULL
[14:30:18.59] Backup Radio ROM [ROM\radio\radio-Radio.nba] End
Press any key to continue . . .
rebeldishman: dude--This is the 3rd post of this information (at least) from you. Post it once and be patient. By the way, it has been answered already in the other forum.)
--sigh.

I Cant Make Full Backup, Need Help (g4) Cingular 8125 Sim & Cid Unlocked

I Cant Make Full Backup, Need Help (g4) Cingular 8125 Sim & Cid Unlocked
--------------------------------------------------------------------------------
I have tryied everything nothing had worked I'm able to Backup OS & Extended Rom. Not a nubby even doing sd backup happens same thing I can make individual backup like IPL, SPL, Extended Rom, OS ect. But I want full backup and I cant. When I use aWizard it does great job but on the radio.nba part this is the message that comes out. I have tryied everithing all the programs availables on all forum this has been a 8 day proyect please some one can help me. HELP HELP HELP HELP HELP HELP HELP HELP HELP. ITS A CINGULAR 8125 (G4) UNLOCKED SIM & CID BY CHECK-IMEI. PLEASE SOMEBODY ANY ADVISE.
THIS IS DOING IT WITH SD
r2sd all
R2SDBackup() Pls. insert SD card !!
Cmd>r2sd all
***** user area size = 0x3B880000 Bytes
R2SDBackup() - Download type = 5
usTotalBlock = 1 sizeof(SDCARD_SIGNATRUE_TABLE)=512
Start address = 0x80000000 , Length = 0x800
Start address = 0x80000800 , Length = 0xC0000
Start address = 0x800C0800 , Length = 0x40000
Start address = 0x80100800 , Length = 0x280000
GSM - dwSize = 345DF
GSM Page0
Start address = 0x4E3D4C0 , Length = 0x3900000
Start address = 0x743D4C0 , Length = 0xA00000
The read size is not matched, load failed!
Some Image (8) load failed, we can not backup All images...
Cmd>
============== aWizard 1.3 beta 2 ===============
- By ahlok_hk -
__________________________________________
- [Credits] -
- itsme for 'itsutils' -
- MachinaGod for 'RapiUnlocker' -
- MachinaGod for 'lokiwiz' -
- mamaich for 'WM5 ROM editing tool' -
- psneddon and kenu for Logo Converter -
- nicob for scripting tips -
- xda-developers.com, buzzdev.net n oths -
__________________________________________
* Please Choose one of the following options:
a - View README file
e - Enable RAPI (Run this after each hard reset)
u - Unlock CID (!!!PLEASE RUN THIS ONE TIME FIRST!!!)
b - Backup Radio, OS and Extended ROM from device
s - Write Backup Splash Logo (.nba) to Wizard
c - Convert + write BMP(240x320) Splash Logo to Wizard
r - Write Radio ROM to device (!! RUN unlock CID 1st !!)
w - Write OS ROM to device (!! RUN unlock CID 1st !!)
q - Quit this program
__________________________________________
!!! ATTENTION! Please use this tool at your own risk!!!
__________________________________________
* Type letter then press [Enter]:B
* Backup Wizard ROM Version 1.0
* Please enter the name of "folder" to save the ROM image to (e.g. "QT-1_6_3_4-W
WE"), no space pls
* Then press [Enter], or q to to main menu:radio
* Backup Radio ROM? (y/n/q):Y
* Backup OS ROM? (y/n/q):N
* Backup Extended ROM? (y/n/q):N
* Backup Splash ROM and HTC Logo? (y/n/q):N
* Please make sure the following before running this option:
* - your have connected your Wizard to the PC with USB ActiveSync connection,
* - already run the option 'e' at least once after the last time you hard reset
the Wizard
* then press [Enter] to start, or q to main menu:
[14:29:32.28] Backup Radio ROM [ROM\radio\radio-Radio.nba] Start
* This process takes about 5 to 8 minutes depends on CPU Speed.
* Please wait.....
3 partitions, 2 binary partitions
customerid=00000000 uniqueid= 00 00 00 00 39 07 01 06 27 2c 17 3e 17 05 06 ec
CopyTFFSToFile(0x50000, 0x280000, ROM\radio\radio-Radio.nba)
ERROR: ITReadDisk: outbuf==NULL
[14:30:18.59] Backup Radio ROM [ROM\radio\radio-Radio.nba] End
Press any key to continue . . .

STRTRK CID Unlock

I'm truly sorry about the delay.
I've finally got round to posting a a STAR100 SuperCID guide.
1. Get itsutils: http://www.xs4all.nl/~itsme/projects/xda/tools.html
2. Run pdocread.exe with no args. Take a note of the "uniqueid" value.
3. Run "pdocread -n 1 0x000000 0x10000 -b 0x4000 original-bdk1.nb" - you'll get a file.
4. Head over to http://www.spv-developers.com/strtrkCID/. Feed it the DOCID and the file you got from steps 2 and 3. It'll give you back anoter file.
5. Run "pdocwrite -n 1 patchedfile.bin 0x000000 0x10000 -b 0x4000" where patchedfile.bin is obviously to be replaced with the patched file you got from step 4.
6. There is no 6. Report feedback.
Click to expand...
Click to collapse
All credit goes to itsme - he wrote all the tools and scripts which made all this possible.
Spawning script: perl startrek_cidedit.pl cid1e62995dd1db197b00b697388760b5e3.bin -i DOPOD601 -c 11111111 -o supercid1e62995.bin 2>&1
decrypting
bufend=44bdd4609845fd0931a871b4a31ddba42d4b96386f9 e9c5dff947c035432fc15
result=b2c7c4eede400853eb232eba436f394b3d75a9adf4c e9a1e452b26ea9059dc59
sha64k=8a7e3a8462b8c851ac125710d44abc05da4916f215e 331f98420db7ae5d87a5d
buffer checksum failed
why ?
Looks like the DOCID value you entered is incorrect. It should be a long stream of hex numbers.
Fantastic !!! Working Ok on SPV F600. Now, we need how to simunlock this smartphone.
Thank you very much Zone Mr.
i run pdocread in step 1 and got a dos screen that desaper in a second,and were i find the file in step 2.
Zone-MR said:
Looks like the DOCID value you entered is incorrect. It should be a long stream of hex numbers.
Click to expand...
Click to collapse
thank you Zone-MR,can u tell me how to get a long stream of hex numbers.
wlinsong said:
thank you Zone-MR,can u tell me how to get a long stream of hex numbers.
Click to expand...
Click to collapse
i know how to do,thank Zone-MR very very much
is there someone know how to flash rom use T-flash Card?
someone can't get the docid ,because you must use the old one!
I tried to do first step but when I ran pdocread.exe I get the following message :
Could not update itsutils.dll to the current version, maybe it is inuse?
try restarting your device, or restart activesync
or maybe your device is application-locked.
I've app-unlocked my device, activesync works ok, and restarting does not help. Phone is Qtek8500.
Any ideas?
Thanks
Is the script to calculate CID area for startrek available?
I think this should use the same method on Artemis or Herald, the problem is that they have G4 DOC and we'll not be able to use pdocwrite, but on those phones we're already able to place a hacked SPL in mem with psetmem.exe and jump into it's address with modified haret version. If we have the right CID area we can use the hacked SPL to flash it.
sorry for the ignorance...
I have downloaded itsutils but where is the dpocread.exe??
do I have to connect to the device with the mtty??
Maybe a bit more explanation
I've CID unlocked my Qtek 8500 and installed new ROM 3.6.251.0. Thanks Zone, great work!
Maybe it would be useful to write more detailed instructions, so here it is :
1. Application unlock your phone using regeditstg and do the following :
HKEY_LOCAL_MACHINE\Security\Policies\Policies\0000 1001 = 2 -->Change the value data from 2 to 1
HKEY_LOCAL_MACHINE\Security\Policies\Policies\0000 1005 = 16 --> Change the value data from 16 to 40
HKEY_LOCAL_MACHINE\Security\Policies\Policies\0000 1017 = 128 --> Change the value data from 128 to 144
Reboot the phone
2. Run SDA_ApplicationUnlock tool. Reboot the phone after it finishes.
3. Download itsutil.zip from http://www.xs4all.nl/~itsme/projects/xda/tools.html , version from 2005-6-28. There is even newer version, but with that version you can not use pdocread without arguments.
4. Connect the phone with activesync
5. Run Command Prompt, go to subfolder named "build" in itsutils folder, and run pdocread without arguments
6. Note the value of "uniqueid". It will be something like : "00 00 00 00 12 03 02 14 3b 07 1b b2 04 05 07 54"
7. run pdocread again with these arguments : "pdocread -n 1 0x000000 0x10000 -b 0x4000 original-bdk1.nb". This will make original-bdk1.nb file in build folder (where the pdocread is located).
8. Upload this file and value of uniqueid to http://www.spv-developers.com/strtrkCID/. It will open a new page after few seconds. Go to bottom of the page and click the link "Download patched BDK1"
9. Download the file (it will be named like "supercidxxxxxxx.bin) to "build" folder
10. Run the pdocwrite from command prompt with these arguments : "pdocwrite -n 1 supercidxxxxxxx.bin 0x000000 0x10000 -b 0x4000". Replace supercidxxxxxxx.bin with the original name of downloaded file from step 9.
11. Wait 15-20 seconds and that is it. Reboot the phone and install the ROM you like
It works! I've got now 3.6.251.0_02.67.30 on my Qtek!
Thank's, damird, your guide is unreplaceble for such lamers like me
But maybe anyone can suggest me were can i find and how to install (if it possible) Russian t9 or only russian lang to input? Or maybe how to rollback to original ROM with this that lang... (1.02.261.1)
Thank's
added:
Problem's gone, Russian T9 added.
Damird!
Cheers mate
Hello, can you share with us this script to calculate CID area in StarTrek?
With this script we can SimUnlock the StarTrek very easy (at least I think...)
Thank you very much.
I'm confused here... is CID unlock not the same with SIM unlock?
my carrier is tmob but I'm getting cing 3125 at ebay so I need to SIM unlock the phone for it to work on tmob right?
wow, pof, I can't wait for it! i had bought one herald in China but wireless was disable by default. I hope I could unlock the CID and get a WWE rom to enable the wireless.
sokelut said:
I'm confused here... is CID unlock not the same with SIM unlock?
my carrier is tmob but I'm getting cing 3125 at ebay so I need to SIM unlock the phone for it to work on tmob right?
Click to expand...
Click to collapse
Correct, you still need to pay to carrier unlock the phone. Check the wiki for links to a few services that are known to work.
CID unlock? Error installing ROM
I'm getting an ERROR [294] INVALID VENDER ID
I did the CID unlock
It starts to install the rom but when it gets to 4% I get this error. How do i fix this?
Can anyone help?!
Need a little clarification
Im stuck in steps 3-11. I've downloaded itsutils and I don't know how to proceed.

My gf's Star Trek needs help

I got my GF a Qtek 8500 to replace her razor and she likes it, but it has been acting weird.
It doesn't show missed calls or any call history and when you compose a text messege and try to add a recipient there are no contacts.
it has Rom version: 1.02.251.1
help please
Thanks
Here you will find the link for the latest qtek rom:
http://wiki.xda-developers.com/index.php?pagename=HTC_StrTrk
I think this update will solve these problems.
Can someone explain what commands I need to type in the command line to finish my CID unlock. I don't really know the command line very well thanks
Here is what I need to do...
5. Run Command Prompt, go to your temp folder and then into a subfolder named "build" ( IN the folder you extracted ex c:\temp). Run pdocread without arguments.
6. Note the value of "uniqueid" produced. It will be something like: 00 00 00 00 12 03 02 14 3b 07 1b b2 04 05 07 54
7. Run pdocread again with these arguments: pdocread -n 1 0x000000 0x10000 -b 0x4000 original-bdk1.nb This will create a "original-bdk1.nb" file in the build folder (where the pdocread is located).
8. Upload this file and value of uniqueid to http://www.spv-developers.com/strtrkCID It will open a new page after few seconds. Go to the bottom of the page and click the link "Download patched BDK1"
9. Download the file (it will be named like "supercidxxxxxxx.bin) to the "build" folder.
10. Run pdocwrite from command prompt again but with these arguments: pdocwrite -n 1 supercidxxxxxxx.bin 0x000000 0x10000 -b 0x4000 Replace supercidxxxxxxx.bin with the original name of downloaded file from step 9.
Okay, I ran the commands with the arguments that were needed and it made the file that in need in the "Build" folder, but when I try to upload it to http://www.spv-developers.com/strtrkCID/ and put in my DOCID it does nothing....
Apparently it is soppsed to give me a file to download, but it just clears out and does nothing.
What do I do?

IMEI RECOVERING.. Yunique

Hi Guys .Today We Can See the possible way for RECOVERING IMEI :good:
Do not blame me it is working.... Method:angel::angel::angel:
This problem arises from the hard bricked ...:crying:
Even after flashing stock recovery . IMEI is not recovered ​:cyclops:
I am not answer person for anything wrong happen
NEED TO DOWNLOAD (FOR PC
1)QXDM professional
(Note: U NEED TO DOWNLOAD A VERSION 3.12.724)
2) USB hs-diagnostic 9006 driver
3)ADB tool & driver
4)Termux app
FOLLOW THE STEPS:
1) Root u r phone nd Install termux or terminal app
2)Open the app nd type SU
3)And type another code
Code:
setprop sys.usb.config diag,adb
4) Connect u r phone with quality usb cable
5)Phone will detect if u correctly install....
Lets Go On​
1) Open qxdm
2)Goto communication
3)Locate NV_ITEMS
Now Search 550 in Item number
Select option dual sim
HTML:
(sim 0 stands for SIM1 and 1 stands for SIM2)
Code:
IMEI example "123456-78-9012340"
sort it out 1 ,23 ,45 ,67 ,89 01 ,23 ,40
{ 0x08, 0x1A, 0x32, 0x54, 0x76, 0x98, 0x10, 0x32, 0x04 }
As you can see i have sorted it out & swaped the values
0x08 is the length keep it as it
0x1A = first digit of IMEI with A
0x32 = swaped 23 to 32
AFTER THAT PRESS WRITE BUTTON...
NOW REPEAT the step for sim 2
Now Give Big Thanks... to Ak.

Categories

Resources