Join Today













Site Sponsor
Page 1 of 7 12345 ... LastLast
Results 1 to 6 of 39

Hybrid View

  1. #1
    BABY NEWB Dex's Avatar
    Join Date
    Jan 2010
    Location
    CDMAGurus.com
    Posts
    700
    Rep Power
    539

    Default Blackberry SPC/MSL PRL Guide Updated

    This was originally posted on MF by tonycortes i copied it and its pasted below hope it helps


    I've updated my guide, enjoy, larger ranges (takes a few more seconds to read, but higher success rate):

    1) Install QXDM (2.08 Release Recommended)

    2) Install Blackberry Desktop Manager (Should create two RIM Virtual Ports on PC)

    3) Run Blackberry Desktop Manager the entire time (Device should show connected)

    4) Using UniCDMA or CDMA WORKSHOP read MSL/SPC from the following:

    Sprint BB MSL/SPC are usually located here: 0x10700000-0x10720000

    Blackberry 8130 Pearl
    Address: 0x106C0000 Length: 1703936
    Address: 0x10130000 Length: 500000

    Blackberry 8330 Curve
    Address: 0x10700000 Length: 1703936

    Blackberry 8703e
    Address: 0x10050000 Length: 1703936

    Blackberry 8800
    Address: 0x10630000 Length: 1703936

    Blackberry 8830 WE
    Address: 0x10600000 Length: 500000

    5) With WinHex (or equivalent HEX Editor) search for 6-digit code in the memory dump by using the GATHER TEXT feature in the SPECIALIST menu. Use this tool to filter out unnecessary characters. I recommend setting the GATHER TEXT feature to 6 succession, only numbers and have Unicode characters tolerated.

    6) Once you obtain the SPC/MSL, exit UniCDMA and run QXDM.

    7) Configure QPST (globe in system tray) and QXDM to the correct ports, phone must show detected.

    8) Using QXDM (ensure VIEW is set to COMMAND OUTPUT) type the following commands:

    a) mode offline-d
    Turns radio off and sets to service mode. Check phone radio is off.

    b) spc "******"
    Replace asteriks with the 6 digit code. Output should read successful.

    c) pr_list_wr 0 "C:\prl_1039.prl"
    If needed change file path to location of PRL. Output should read successful.

    d) nv_write sec_code {"000000"}
    Optional: use this command to change code to zeros or another 6 digits.

    e) mode reset
    Reboots phone to reset mode.

    9) Finally, through the phone type #4357* (#HELP*) to verify the PRL write.

    10) To access NAM Programming, dial ##6digitMSL and press SEND


    NOTE: If your PRL reverts (Sprint) back to original, you will need to disable NAM_LOCK and change the REGISTRATION ID to 2004 or your local HOME SID.

    QXDM NAM Lock Disable:
    a) nv_read nam_lock (should read enabled, which we'll change in the next command)
    b) nv_write nam_lock 0 0 (disables)

    For the Registration ID, you can change it via three common methods: UniPST, QXDM, or within the phone.

    UniPST Reg ID
    Use the RIM 7250c DLL and change the REGISTRATION ID and ID LIST to 2004 or your HOME SID

    QXDM Reg ID
    These commands will change ID to 2004, you can change the HEX values to modify it to your HOME SID
    2.x Series:
    mode offline-d
    spc "000000"
    nv_write_item 11055 0xD4 0x07
    nv_write_item 11089 0x01 0xD4 0x07
    mode reset
    3.x Series:
    mode offline-d
    spc "000000"
    requestnvitemidwrite 11055 0xD4 0x07
    requestnvitemidwrite 11089 0x01 0xD4 0x07
    mode reset

    Within Phone Reg ID
    Dial ##6digitMSL and press SEND
    Show menu, select Edit REG ID
    Enter your desired REG ID and remove all other entries
    Save changes

    additional notes: try to credit those who help. the 2004 reg id tip is due to another member, portax
    I am Dex's Lab of the Ohio Cricket Mafia
    Latest Exploit:
    Official Cricket TP2 and TP Rom from the Mafia
    Next Exploit:
    Palm Pixi Rom
    Quote:Pwnage is best served VIA USB Cable!!!!!!!!!

  2. #2
    Premium Member
    Join Date
    Jan 2010
    Location
    Virginia Beach, Virginia, United States
    Posts
    267
    Rep Power
    188

    Default Blackberry SPC/MSL PRL Guide Updated

    For those using a newer QXDM, there are different commands.

    RequestNVItemWrite "sec_code" 000000
    RequestNVItemWrite "nam_lock" 0 0

    Use QPST build 215 to load PRL. It may say failed, but it did work.
    Last edited by meanngreen04; 03-08-2010 at 06:57 PM.

  3. #3
    BABY NEWB Dex's Avatar
    Join Date
    Jan 2010
    Location
    CDMAGurus.com
    Posts
    700
    Rep Power
    539

    Default Re: Blackberry SPC/MSL PRL Guide Updated

    Must be careful about using QPST on BB they have a tendensy to delete the SPC from the phone which is very hard to restore which can be done a guide will be posted once we an find it again
    I am Dex's Lab of the Ohio Cricket Mafia
    Latest Exploit:
    Official Cricket TP2 and TP Rom from the Mafia
    Next Exploit:
    Palm Pixi Rom
    Quote:Pwnage is best served VIA USB Cable!!!!!!!!!

  4. #4
    Premium Member
    Join Date
    Jan 2010
    Location
    Virginia Beach, Virginia, United States
    Posts
    267
    Rep Power
    188

    Default Re: Blackberry SPC/MSL PRL Guide Updated

    Yes, well for those using Vista/Windows 7 QXDM 2.08 won't run. Have to use the newer version of QXDM. Unless, you know a legacy command to write prl in newer QXDM. May want to post the unipst with the bb dll for them as well.
    To simply seek is overrated. That's why you have search.

  5. #5
    Specialist love2sin's Avatar
    Join Date
    Feb 2010
    Location
    Somewhere Between Heaven and Hell
    Age
    32
    Posts
    164
    Rep Power
    88

    Default Re: Blackberry SPC/MSL PRL Guide Updated

    Using CDMA Workshop paid Version

    To get SPC from 8330 or 8330m

    CONNECT CDMAW

    GO TO MEMORY IN MEMORY/EEPROM ADDRESS

    START ADDRESS 1071:520A

    <READ>

    SAVE file to a Folder ( I usually save it to DESKTOP it's easier to find )

    OPEN W HEX EDITOR FIRST 6 DIGITS (I use "Busca SPC" its easy use )

    IN RIGHT WINDOW ARE YOUR SPC

    [size=12pt]MUST be v4.5.0.131 in order to read SPC if it's .175 you must downgrade to .131[/size]

    [size=10pt]I got this a while back from MF I think from "Metalman1974"[/size]


    [size=14pt]ENJOY [/size]

    SLEEP IS OVER RATED

    "Give a man a fish you feed him for a day. Teach a man to fish you feed him for a lifetime"

    IT SEEMS THE MORE I KNOW, THE LESS I KNOW ...........

  6. #6
    Specialist love2sin's Avatar
    Join Date
    Feb 2010
    Location
    Somewhere Between Heaven and Hell
    Age
    32
    Posts
    164
    Rep Power
    88

    Default Re: Blackberry SPC/MSL PRL Guide Updated

    Anybody have the START ADDRESSES for the 8130 and/or 8830

    (ie. 8330 START ADDRESS 1071:520A)
    SLEEP IS OVER RATED

    "Give a man a fish you feed him for a day. Teach a man to fish you feed him for a lifetime"

    IT SEEMS THE MORE I KNOW, THE LESS I KNOW ...........


 
Page 1 of 7 12345 ... LastLast

Similar Threads

  1. Simple Mobile Service Books (Updated) Blackberry Browser/MMS and MORE
    By bobbythetech in forum Flashing Solutions
    Replies: 6
    Last Post: 09-28-2011, 05:47 PM
  2. Noob's Guide To Flashing Blackberry Storms 9530 To MetroPCS
    By Pac3comm1 in forum Flashing Blackberries to Metro PCS
    Replies: 33
    Last Post: 08-10-2011, 09:26 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •