Brew for Verizon Samsung Models

**berry_lthird** · 07-08-2008, 07:55 PM

Was trying to adapt the Brew settings from my vx9900 tutorial so they will work on the Samsung series offered by Verizon to no avail. The procedure is the same as the WAP and MMS settings: Read the phone with Samsung PST Lite, edit the file with Samsung PST (Full), then write back to the phone with PST Lite.

I think the problem lies in that Verizon's Get It Now service resolves different gateways for each category of downloadable extras, i.e., music, games, etc., whereas Cricket only uses ONE primary gateway for it's Clicks service.

I'm confident, however, that if I can discover the NVM file containing the gateway info, I can hex-edit the gateway addresses and make them all point to Cricket's Clicks gateway.

In the meantime, my daughter has a u470 Juke that I changed the Brew settings for, now I can't get MMS to work. The same settings worked before I changed the Brew settings. I've called Cricket and had them reset the account to no avail. (Incidentally, the music player doesn't delete itself when you change the Brew settings like on some LG phones like the vx9900 enV.)

Meanwhile, if someone would be kind enough to share with me the default Brew settings for the u470 Juke I would greatly appreciate it, and thanks in advance.

Tomorrow when my daughter brings her Juke by I will try again to see if I can find the NVM files responsible for Verizon's Get It Now gateway server entries.

**berry_lthird** · 07-10-2008, 09:26 AM

I was successfully able to get MMS working again. It seems that when I wrote the Brew settings back to the phone, the MMS and MIP settings reverted back to Verizon. Strange.

I have it fixed now, but haven't had a chance to test the Brew settings because my Daughter is constantly on her phone!

**berry_lthird** · 07-12-2008, 09:39 AM

.......because I just found out how to get into the Brew settings on the u470 Juke handset itself. Go to Get It Now and press 0. Then enter your phone's 4-digit user lock code, and the Brew menu appears! Here, you can set all the Brew parameters and such. You can even access the generic Brew catalog page (sans gateway redirects). However, I haven't figured out how to make changes in this menu at this time (it's locked for editing).

There must be a file similar to the paramtable1.fil that has a bit that can be changed to allow editing of the Brew parameters. It also may be a setting you can access using Samsung PST family. Again......if I could get some time with the phone--getting a cell phone out of the clutches of my teenaged daughter is like trying to lasso the moon from the Earth with dental floss. Used dental floss at that.

Anyway, can anyone else who has access to a Juke help me with this? We're 50% there.......

OH.....and I'm assuming this should work with other Verizon Samsung models as well. Again, I need some of you other hackers out there to help confirm this.

Deuces for now.

EDIT: I have an idea--I'm going to use CDMA Workshop to send the unlock code to the phone and see if I can edit the menu entries after that. Once I get the phone in my hands again, that is......

**berry_lthird** · 07-14-2008, 06:06 AM

Okay I figured out where the Brew settings are using BitPim: They are in a file labeled nvm_data in the nvm folder. You can use BitPim to save this file to your computer.

Once there, you can open the file in any simple hex editor.

I used the same Brew settings as I did for the LG vx9900 enV:

Leap-prod-vip.qualcomm.com,Leap-test-vip.qualcomm.com

*NOTE: Qualcomm is spelled with TWO mm's.

The next two settings are the Platform ID, which is 8074, and the Carrier ID, which is 82 (see the screenshot below):

You can get to the URL settings from the hidden Brew menu by going to Get It Now and pressing zero. Enter your 4-digit lock code (or SPC on some models) to access this menu. Change as many settings as you have access to. Some won't change, but that's where BitPim comes in handy. Once you've changed as much as you can, save the nvm_data file to your computer and open it in a hex editor.

Change all instances of vzw3g.com to mycricket.com.

The main change you need to make here is the Carrier ID: It's located at offset 4724. Change the value there from C8 hex (200 decimal) to 52 hex (82 decimal) as follows:

I've gotten this far, but I still don't have a Juke to test my findings on. Once I do, however, I will write an official guide on how to get this working. Again, this should theoretically work with MOST Verizon Samsung models.

Oh, and thanks for all the help and support, suckas!

**berry_lthird** · 07-14-2008, 06:24 AM

Attached is a modified nvm_data file. Open in your favorite hex editor and replace the two instances of XXXXXXXXXX at offsets 131 and 2629 with your own 10 digit phone/MDN number. Be sure to back up your original nvm_data file first before replacing with mine.

AGAIN: This file is for the u470 Juke, but my guess is that should work for most Verizon Samsung handsets. Please let me know if it works for you!

**lil_shortys_** · 07-14-2008, 08:34 AM

i noticed u metioned that some settings get changing back to vrz how did u get it to stick

**berry_lthird** · 07-14-2008, 08:45 AM

Originally Posted by lil_shortys_

i noticed u metioned that some settings get changing back to vrz how did u get it to stick

Only when I tried to do the Brew settings using the Samsung PST family. You have to have the Brew settings and MIP settings checked in order for them both to stick using this method.

**lil_shortys_** · 07-14-2008, 09:15 AM

ok. ive been working a glyde for about a day and i cant seem to make any settings stick not even brew. and ive checked the boxes.

sorry if it seem slike i hy jacked this thread not my intention.....

**berry_lthird** · 07-14-2008, 09:48 AM

Originally Posted by lil_shortys_

ok. ive been working a glyde for about a day and i cant seem to make any settings stick not even brew. and ive checked the boxes.

sorry if it seem slike i hy jacked this thread not my intention.....

The Glyde has known issues with the settings sticking. There is a thread here in the Cricket forums devoted to this. I would suggest you also enlist the help of the Samsung Manufactuer's forum and Verizon Samsung forum here as well as the one over at Mobile - Files . com.

**berry_lthird** · 07-14-2008, 05:32 PM

I hit a big snag today. Apparently you can't write the NV item back to the phone because it has been blocked by the provider. More specifically, I think the file is in use when the phone is on.

My only other guess is to read the phone using Samsung PST Lite, which puts the phone in a special "sleep" mode. That might leave its file system vulnerable to modification.

*sigh* It's difficult to hack a phone when your kid is busy trying to send and receive texts 600 percent of the time.

**stevekice** · 09-02-2008, 02:31 AM

You could also try overwriting the file with the phone turned off but connected to the computer (not sure if it works for the juke).

We need a way to get around bitpim and qpst telling us what we can and cant overwrite/create. That would open up many a possibility...

**berry_lthird** · 09-02-2008, 07:40 AM

Originally Posted by stevekice

You could also try overwriting the file with the phone turned off but connected to the computer (not sure if it works for the juke).

We need a way to get around bitpim and qpst telling us what we can and cant overwrite/create. That would open up many a possibility...

If you have a Samsung handy, you can use UniCDMA to suspend the phone in Offline-D and DM modes. Alternatively, you can use the Samsung PST to read the phone: Before it reads the phone it suspends it. Finally, you can use CDMA Workshop to send the phone it's special 16-digit lock code after suspending it.

Then use QPST's EFS Explorer to do the dirty work on the file manipulation.

**berry_lthird** · 09-06-2008, 05:05 PM

I think I have Brew finally working for the u740.

I'll know for sure tomorrow, because I just activated this account.

*EDIT: NEVERMIND! LOLOL!!! You won't believe this, but changing the Brew settings on the u740........guess what......it ZAPS the media player! LOL!!! Just like the vx9900 series.

Oh well.

Tried to do a firmware flash. No dice. But the phone still works, MMS, WAP, et al.

**berry_lthird** · 09-07-2008, 02:14 AM

It works!!!

This means that if I can get Brew working on the u740, it should work on other Samsungs as well. Now the only question left is: Which Samsungs will lose the media player like some of the LG series phones.

However, if someone who has a working u740 who knows how to backup the default games and apps using Samsung PST, I think I can repair the media player! (The same goes for the LG series, BTW......using LG Download, of course......)

Anyway, I will have a guide posted here shortly.......

**mallen462** · 10-18-2008, 09:18 PM

Originally Posted by berry_lthird

It works!!!

This means that if I can get Brew working on the u740, it should work on other Samsungs as well. Now the only question left is: Which Samsungs will lose the media player like some of the LG series phones.

However, if someone who has a working u740 who knows how to backup the default games and apps using Samsung PST, I think I can repair the media player! (The same goes for the LG series, BTW......using LG Download, of course......)

Anyway, I will have a guide posted here shortly.......

did you get the brew working on a u740?