OK, here goes:
1. De-register the phone with its base station
2. In WinFIOL, start a signal trace on MD110 base station. To do this you need to find the LIM that it is connected to (x), and then type the commands:
• STUNI:UNIT=CTLP,LIM=x;
(This will print out the trace individual number

)
• STTSI:TRI=n;
3. Attempt to register the phone (use any PIN, it doesn’t matter as this should fail)
4. Stop the signal trace, and print the results:
• STTSE:TRI=n;
• STRAP:TRI=n;
5. Find the GETDIRNUM entry in the printout and take the first line of values under 4,5,6,7,8,9. e.g. from the printout below need the data H'01 H'D8 H'00 H'0C H'73 H'D8
20.50.19.480 00009 SWSW SIGNAL GETDIRNUM (H'0041)
FROM CTLP (H'0173) EXE A IN LIM 001
TO CTLMP (H'0172) EXE A IN LIM 001
WITH 0 1 2 3 4 5 6 7 8 9
000 H'01 H'C7 H'2F H'01 H'01 H'D8 H'00 H'0C H'73 H'D8
010 H'02 H'02 H'01 H'FA H'02 H'01 H'85 H'88
20.50.19.480 00010 SWSW SIGNAL GETDIRNUMRES (H'0022)
6. The IPEI-n number is made up of the values 4-9 which needs to be converted to the 13 digit IPEI number. The info for doing that I think is in the thread linked to above. If not, let me know.
If you have problems, I've got a word file that I've writtent he instructions to which is more readable!! I can upload it somewhere and send you a link
Chris