QXDM 2.08.05 Commands - Useful for BB Flashing!

[k3rrsed]

The following commands are for QXDM 2.08.05. These commands differ for newer versions.

Be sure to enter commands exactly as they are displayed below, unless indicated otherwise. Entering any of these commands incorrectly could do irreparable damage to the device you are flashing.

Send SPC:

spc "XXXXXX" (replace XXXXXX with actual SPC; the quotations are required)

Write SPC:

nv_write sec_code {"000000"}

Read NAM Lock:

nv_read nam_lock 0
nv_read nam_lock 1

Disable NAM Lock:

nv_write nam_lock 0 0
nv_write nam_lock 1 0

Change BBRegID to 2004:

nv_write_item 11055 0xD4 0x07
nv_write_item 11089 0x01 0xD4 0x07

Write PRL to phone:

pr_list_wr 0 "C:\location of prl"
pr_list_wr 1 "C:\location of prl"

Be sure the enter the location of the PRL accurately to prevent errors. I've discovered it is easiest to copy your desired PRL to the C:\ drive, i.e.

pr_list_wr 0 "C:\Cricket 01050"
pr_list_wr 1 "C:\Cricket 01050"

Save Changes:

mode reset

[bigglou23]

Do you have the download link?

[thesmitty68521]

The link for this application is in software for flashing phones category. As I have said before, I don't really want to make this "too easy". People need to do some searching sometimes. That makes us better flashers and improves our searching skills.

That is just my opinion. And really not trying to be mean here. My intent on this site is to have it available for serious flashers. Not for someone who just wants all the answers given to them on a silver plattter.

Heck, I still remember back when I searched for two and a half ours trying to find a L7C monster only to find out I actually had it on my computer. It was the K1M. They are interchangeable.

Good Job K3rrsd.

[bigglou23]

Its all good, i have it... just wondered why link was not added.
I think we should at least add that the software has been posted on
this forum. So they at least will need to search a little and keep them interested

[Dex]

now if we can get the commands for QXDM 3.9.10

[pctech101]

This is my cheat sheet for QXDM 3.x

ESN REPAIR:

If the Value is 0x2A then Phone is ESN Based
If the Value is 0x3A then Phone is MEID Based

mode offline-d
RequestNVItemRead "lock_code"
RequestNVItemRead "sec_code"
RequestNVItemWrite "sec_code" "000000"

password ****************

RequestNVItemRead scm
RequestNVItemWrite scm 0x2a
RequestNVItemWrite scm 0x3a

RequestNVItemRead esn
RequestNVItemWrite esn 0x0 (This zeros ESN)
RequestNVItemWrite esn 0x00000000 (This zeros ESN)

RequestNVItemRead meid
RequestNVItemWrite meid 0x0000000000000000 (Use to zero)
RequestNVItemWrite meid 0x00a1000001234abc (use to write actual MEID)


mode reset

BB REG ID (set REGID to 2004)
requestnvitemidwrite 11055 0xD4 0x07
requestnvitemidwrite 11089 0x01 0xD4 0x07
(Join the two together in reverse (endian) and then proceed to convert it to decimal:
D4 07 (stored) converts to 07D4 (actual output) which is 2004 (decimal output))

Reset Call Timers:
RequestNVItemWrite "call_timer_g" 0
RequestNVItemWrite "life_timer_g" 0
RequestNVItemWrite "life_cnt" 0
RequestNVItemWrite "air_timer" 0 0

There is no easy way to write the PRL in 3.x