Engineering Screen on Bold

[intprd04]

Just an update to my last post I decided to debrand my Rogers Branded phone. Went off without any problems and got the escreen immediately after the OS load just by pressing alt aA h without having to generate a code. The phone is still locked to the Rogers network. So either you use the generator or debrand your phone to get the escreen is my conclusion. Haven't tried just unlocking so I don't know if unlocking a branded phone would give you the escreen without a code, but from other posts, I think the answer is no. Btw, debranding gives GPS options 2 brand new lines with the ability to see cell tower locations on BB maps. Simply amazing what the carriers take away from us users! Again thanks to Croe & Tyth & everyone else that contributed to this! I have spent many hours in the escreen, google and Wikipedia to find out as much as I can. So far, I have managed to curb my reboots with a combination of RAT & frequency changes. I use 2g only, locked on to 850MHz band (Rogers 1900MHz band here gives non-edge data here) & GERAN only (no 3g service in my area anyhow) and a few other tweaks.
To give back a bit here's something I have not seen posted, so I will share with u all: If ur running a Bold with OS 5.0.0.348 - go to OS engineering then input devices - there you can enable RIM's new experimental trackball driver. It is great improvement & I love it. It has to be enabled after every reboot. Thanks again all!

Posted from my CrackBerry at wapforums.crackberry.com

EDIT: Mr. Aprentice has cleared it up. I have checked and my device is debranded to vendor Id: 1. Unlocking, although useful if you want to switch carriers, has nothing to do with escreen unlocking. And debranding does not guarantee escreen unlock unless you set the vendor id correctly.

[Sith_Apprentice]

You can do both when debranding btw. Adds about 15 seconds (maybe) to the whole process.

[dictoresno]

Originally Posted by Sith_Apprentice

You can do both when debranding btw. Adds about 15 seconds (maybe) to the whole process.

yea i was about to ask him why he didnt just unlock it while he was in there debranding....

[nkc]

can one change the sim number from the escreen, i cant seem to change mine from the adv option menu. it gives error accesing sim. i have also tried ##000000, that just made a call. thank you

[digitalb0y]

The thing is, debranding doesn't seem to give permanent access to the engineering screens. I finally bit the bullet and debranded, and while it did remove the AT&T 3G limitation, it still brings up the Help Me! screen when I load a fresh OS. Is that not the case for the rest of you? I still use Thyth's generator to gain access to the escreens, so don't go voiding your warranties for the escreens.

I've never had one of Thyth's codes expire on me. I guess I switch OSes more often than every 30 days! I keep a link to the Thyth-O-Matic in my BB browser and go there first thing on every OS update. I now use the escreens daily for monitoring (and when necessary, killing) processes and forcing garbage collection. I've been meaning to update my 2G/3G tutorial since it's almost obsolete. Most OSes now let users disable 3G (oddly, not 2G though, unless you've debranded). But there's still a handful of really useful things you can do easier in the escreens than by any other method, and I'm far less afraid of screwing anything up than I was at first. I mess with them a lot and the worst that's happened is I've made my phone reboot unexpectedly while trying to change the thresholds for the backlight brightness.

[Thyth]

Arbitrary debranding won't give you engineering screens. You need to debrand to a vendor ID that deactivates device security (which I think is just VID 1).

[nkc]

@thyth.. do u tink i can change my sim number from anywhere in the escreen. is there an option for that. thanks

[gbsn]

Originally Posted by digitalb0y

The thing is, debranding doesn't seem to give permanent access to the engineering screens. I finally bit the bullet and debranded, and while it did remove the AT&T 3G limitation, it still brings up the Help Me! screen when I load a fresh OS. Is that not the case for the rest of you? I still use Thyth's generator to gain access to the escreens, so don't go voiding your warranties for the escreens.

I've never had one of Thyth's codes expire on me. I guess I switch OSes more often than every 30 days! I keep a link to the Thyth-O-Matic in my BB browser and go there first thing on every OS update. I now use the escreens daily for monitoring (and when necessary, killing) processes and forcing garbage collection. I've been meaning to update my 2G/3G tutorial since it's almost obsolete. Most OSes now let users disable 3G (oddly, not 2G though, unless you've debranded). But there's still a handful of really useful things you can do easier in the escreens than by any other method, and I'm far less afraid of screwing anything up than I was at first. I mess with them a lot and the worst that's happened is I've made my phone reboot unexpectedly while trying to change the thresholds for the backlight brightness.

whats your vendor id? if its 1 (given by VSM-11697-001) the escreen will be permanent no matter what os O_o, if its 179 or any other, then the escreen has to be unlocked.

[synwars]

Originally Posted by digitalb0y

The thing is, debranding doesn't seem to give permanent access to the engineering screens. I finally bit the bullet and debranded, and while it did remove the AT&T 3G limitation, it still brings up the Help Me! screen when I load a fresh OS. Is that not the case for the rest of you? I still use Thyth's generator to gain access to the escreens, so don't go voiding your warranties for the escreens.

I've never had one of Thyth's codes expire on me. I guess I switch OSes more often than every 30 days! I keep a link to the Thyth-O-Matic in my BB browser and go there first thing on every OS update. I now use the escreens daily for monitoring (and when necessary, killing) processes and forcing garbage collection. I've been meaning to update my 2G/3G tutorial since it's almost obsolete. Most OSes now let users disable 3G (oddly, not 2G though, unless you've debranded). But there's still a handful of really useful things you can do easier in the escreens than by any other method, and I'm far less afraid of screwing anything up than I was at first. I mess with them a lot and the worst that's happened is I've made my phone reboot unexpectedly while trying to change the thresholds for the backlight brightness.

My vendor ID is "1", no more "help me" screen.

Posted from my CrackBerry at wapforums.crackberry.com

[intprd04]

Originally Posted by Sith_Apprentice

You can do both when debranding btw. Adds about 15 seconds (maybe) to the whole process.

I should have unlocked at the same time, but the instructions I was reading didn't mention unlocking and I didn't take the tine to research it further. I suspected that m** would be the same program to unlock but now I'll have to use again to unlock then reload OS and restore. Could have saved myself some steps But in my defense, I've only been a BlackBerry user since August 2009, so I'm not doing too bad?
BTW, in my last post I forgot the 850 before the MHz. What it should have said was: I disabled the 1900 MHz band, as Rogers in my area uses that for non-edge data. So I only run on 850 band with GERAN as no 3g in my area. That way I always get an EDGE signal without flipping to gprs all the time and save some battery life with UTRAN disabled.
Btw, is anyone using the new track ball driver? It is still available under OS engineering on OS 5.0.0.411 on the 9000. I love it!

Posted from my CrackBerry at wapforums.crackberry.com

[digitalb0y]

Saving the following code as an html file should produce very similar results to visiting Thyth's site:

<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">

<style type="text/css">
label {
  width: 180px;
  display: block;
  float: left;
  text-align: right;
  padding-right: 2px;
}
</style>

<script type="text/javascript">
var rm;function ri(){var map = new Array();var s = unescape("%61%62%63%64%65%66%67%68%69%6A%6B%6C%6D%6E%6F%70%71%72%73%74%75%76%77%78%79%7A");for(i=0; i<s.length; i++) map[s.charAt(i)]= s.charAt((i+13)%26); for (i=0; i<s.length; i++) map[s.charAt(i).toUpperCase()]	= s.charAt((i+13)%26).toUpperCase(); return map;}function r(a){ if (!rm) rm=ri(); s = ""; for (i=0; i<a.length; i++) { var b = a.charAt(i); s	+= (b>='A' && b<='Z' || b>='a' && b<='z' ? rm[b] : b); } return s;}
function jsSHA(k,l){jsSHA.charSize=8;jsSHA.b64pad="";jsSHA.hexCase=0;var m=null;var o=function(a){var b=[];var c=(1<<jsSHA.charSize)-1;var d=a.length*jsSHA.charSize;for(var i=0;i<d;i+=jsSHA.charSize){b[i>>5]|=(a.charCodeAt(i/jsSHA.charSize)&c)<<(32-jsSHA.charSize-i%32)}return b};var p=function(a){var b=[];var c=a.length;for(var i=0;i<c;i+=2){var d=parseInt(a.substr(i,2),16);if(!isNaN(d)){b[i>>3]|=d<<(24-(4*(i%8)))}else{return"INVALID HEX STRING"}}return b};var q=null;var r=null;if("HEX"===l){if(0!==(k.length%2)){return"TEXT MUST BE IN BYTE INCREMENTS"}q=k.length*4;r=p(k)}else if(("ASCII"===l)||('undefined'===typeof(l))){q=k.length*jsSHA.charSize;r=o(k)}else{return"UNKNOWN TEXT INPUT TYPE"}var s=function(a){var b=jsSHA.hexCase?"0123456789ABCDEF":"0123456789abcdef";var c="";var d=a.length*4;for(var i=0;i<d;i++){c+=b.charAt((a[i>>2]>>((3-i%4)*8+4))&0xF)+b.charAt((a[i>>2]>>((3-i%4)*8))&0xF)}return c};var u=function(a){var b="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";var c="";var d=a.length*4;for(var i=0;i<d;i+=3){var e=(((a[i>>2]>>8*(3-i%4))&0xFF)<<16)|(((a[i+1>>2]>>8*(3-(i+1)%4))&0xFF)<<8)|((a[i+2>>2]>>8*(3-(i+2)%4))&0xFF);for(var j=0;j<4;j++){if(i*8+j*6>a.length*32){c+=jsSHA.b64pad}else{c+=b.charAt((e>>6*(3-j))&0x3F)}}}return c};var v=function(x,n){if(n<32){return(x<<n)|(x>>>(32-n))}else{return x}};var w=function(x,y,z){return x^y^z};var A=function(x,y,z){return(x&y)^(~x&z)};var B=function(x,y,z){return(x&y)^(x&z)^(y&z)};var C=function(x,y){var a=(x&0xFFFF)+(y&0xFFFF);var b=(x>>>16)+(y>>>16)+(a>>>16);return((b&0xFFFF)<<16)|(a&0xFFFF)};var D=function(a,b,c,d,e){var f=(a&0xFFFF)+(b&0xFFFF)+(c&0xFFFF)+(d&0xFFFF)+(e&0xFFFF);var g=(a>>>16)+(b>>>16)+(c>>>16)+(d>>>16)+(e>>>16)+(f>>>16);return((g&0xFFFF)<<16)|(f&0xFFFF)};var E=function(f,g){var W=[];var a,b,c,d,e;var T;var H=[0x67452301,0xefcdab89,0x98badcfe,0x10325476,0xc3d2e1f0];var K=[0x5a827999,0x5a827999,0x5a827999,0x5a827999,0x5a827999,0x5a827999,0x5a827999,0x5a827999,0x5a827999,0x5a827999,0x5a827999,0x5a827999,0x5a827999,0x5a827999,0x5a827999,0x5a827999,0x5a827999,0x5a827999,0x5a827999,0x5a827999,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x6ed9eba1,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0x8f1bbcdc,0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6,0xca62c1d6];f[g>>5]|=0x80<<(24-g%32);f[((g+1+64>>9)<<4)+15]=g;var h=f.length;for(var i=0;i<h;i+=16){a=H[0];b=H[1];c=H[2];d=H[3];e=H[4];for(var t=0;t<80;t++){if(t<16){W[t]=f[t+i]}else{W[t]=v(W[t-3]^W[t-8]^W[t-14]^W[t-16],1)}if(t<20){T=D(v(a,5),A(b,c,d),e,K[t],W[t])}else if(t<40){T=D(v(a,5),w(b,c,d),e,K[t],W[t])}else if(t<60){T=D(v(a,5),B(b,c,d),e,K[t],W[t])}else{T=D(v(a,5),w(b,c,d),e,K[t],W[t])}e=d;d=c;c=v(b,30);b=a;a=T}H[0]=C(a,H[0]);H[1]=C(b,H[1]);H[2]=C(c,H[2]);H[3]=C(d,H[3]);H[4]=C(e,H[4])}return H};this.getHash=function(a){var b=null;var c=r.slice();if(m===null){m=m=E(c,q)}switch(a){case"HEX":b=s;break;case"B64":b=u;break;default:return"FORMAT NOT RECOGNIZED"}return b(m)};this.getHMAC=function(a,b,c){var d=null;var e=null;var f=[];var g=[];var h=null;var j=null;switch(c){case"HEX":d=s;break;case"B64":d=u;break;default:return"FORMAT NOT RECOGNIZED"}if("HEX"===b){if(0!==(a.length%2)){return"KEY MUST BE IN BYTE INCREMENTS"}e=p(a);j=a.length*4}else if("ASCII"===b){e=o(a);j=a.length*jsSHA.charSize}else{return"UNKNOWN KEY INPUT TYPE"}if(512<j){e=E(e,j);e[15]&=0xFFFFFF00}else if(512>j){e[15]&=0xFFFFFF00}for(var i=0;i<=15;i++){f[i]=e[i]^0x36363636;g[i]=e[i]^0x5C5C5C5C}h=E(f.concat(r),512+q);h=E(g.concat(h),672);return(d(h))}}
    function newHMAC() {
    zib1=document.getElementById("devpin").value+document.getElementById("appv").value+document.getElementById("uptime").value;
    vkey=document.getElementById("validity");
    zib1=zib1+r(unescape(vkey.options[vkey.selectedIndex].value));
    hmacObj = new jsSHA(zib1, "ASCII");
    calcHMAC();
    }
    function calcHMAC() {
      var keyTypeSelectBox = document.getElementById("hmacKeyType");
      var hashVariantSelectBox = document.getElementById("hmacVariant");
      var hmac = hmacObj.getHMAC(r(unescape("%48%63%20%67%75%72%20%67%76%7A%72%20%66%67%65%72%6E%7A%20%6A%76%67%75%62%68%67%20%6E%20%47%4E%45%51%56%46")),
        "ASCII",
        "HEX");
        document.getElementById("ykey").innerHTML = hmac.toUpperCase().substring(0,8)
    }
</script>

<title>eScreen Keygen</title>
</head>

<body>
<br>

<div>
<label for="devpin">Device PIN:&nbsp;</label><input size="16" name="devpin" id="devpin" onKeyUp="newHMAC();" type="text">
</div>

<div>
<label for="appv">App Version:&nbsp;</label><input size="16" name="appv" id="appv" onKeyUp="newHMAC();" type="text">
</div>

<div>
<label for="uptime">Uptime:&nbsp;</label><input size="16" name="uptime" id="uptime" onKeyUp="newHMAC();" type="text">
</div>

<div>
<label for="validity">Key Duration:&nbsp;</label> 
<select name="validity" id="validity" onChange="newHMAC()">
<option value="">1 day</option>
<option value="%55%72%79%79%62%20%7A%6C%20%6F%6E%6F%6C%2C%20%75%72%79%79%62%20%7A%6C%20%75%62%61%72%6C%2C%20%75%72%79%79%62%20%7A%6C%20%65%6E%74%20%67%76%7A%72%20%74%6E%79">3 days</option>
<option value="%55%72%20%6A%6E%66%20%6E%20%6F%62%6C%2C%20%6E%61%71%20%66%75%72%20%6A%6E%66%20%6E%20%74%76%65%79%2C%20%70%6E%61%20%56%20%7A%6E%78%72%20%76%67%20%6E%61%6C%20%7A%62%65%72%20%62%6F%69%76%62%68%66%3F">7 days</option>
<option value="%46%62%20%6E%7A%20%56%2C%20%66%67%76%79%79%20%6A%6E%76%67%76%61%74%2C%20%73%62%65%20%67%75%76%66%20%6A%62%65%79%71%20%67%62%20%66%67%62%63%20%75%6E%67%76%61%74%3F">15 days</option>
<option value="%56%20%79%62%69%72%20%7A%6C%66%72%79%73%20%67%62%71%6E%6C%2C%20%61%62%67%20%79%76%78%72%20%6C%72%66%67%72%65%71%6E%6C%2E%20%56%27%7A%20%70%62%62%79%2C%20%56%27%7A%20%70%6E%79%7A%2C%20%56%27%7A%20%74%62%61%61%6E%20%6F%72%20%62%78%6E%6C">30 days</option>
</select>
</div>
<br>
    
<div>
<label for="key">Your key is:&nbsp;</label><span id="ykey" name="ykey">Enter data above.</span>
</div>

</body>
</html>

I didn't write that code myself. I cleaned up, copied and pasted bits of source code from pages I found using Google.

[narci]

I can't seem to get this to work on the bold 9000 running 5.0.0.509.

I saved the code into notepas as HTML, enetered the info and tried to enter it into the helpme screen. Nothing happened.

Any ideas?

Update: NM, i got it to work..had to put the full app version in there.

thanks

[digitalb0y]

Originally Posted by narci

I can't seem to get this to work on the bold 9000 running 5.0.0.509.

I saved the code into notepas as HTML, enetered the info and tried to enter it into the helpme screen. Nothing happened.

Any ideas?

Make sure that you're including the space and number in parentheses when you enter the OS app version. Also make sure you're not closing the HelpMe! screen between getting all of the information from it and typing in the generated code. Lastly, be sure you're pressing Alt for numbers when you enter the code. That should get you in.

[dictoresno]

Originally Posted by Thyth

Arbitrary debranding won't give you engineering screens. You need to debrand to a vendor ID that deactivates device security (which I think is just VID 1).

you can also use Vendor ID 0, its a RIM engineering unit ID.

[digitalb0y]

Originally Posted by dictoresno

you can also use Vendor ID 0, its a RIM engineering unit ID.

Are you sure that 0 works? I know you can choose 0 and not have a carrier's logo or restrictions, but I think my mistake before may have been choosing 0 and not 1.

To be fair, I don't remember what VSM I used originally. It didn't give me the little "Property of Research In Motion" text and logo at startup the way that vendor ID 1 does, but I still needed the keygen after every OS install.