blackberry 9550 flashing problems

[AlexFG]

I kinda had a similar problem with an older BB 8703e a while ago, it was from verizon but it wouldn't take ##000000 because the spc got corrupted somehow.
I couldn't fix it with CDMA WS, QPST or QXDM.

The only program that fixed it was uniCDMA, I just had to rewrite it and it worked perfectly afterwards. You don't have memory access on the 9550 so it might not work but just give it a shot and see how it goes.

[blevinski]

what was the memerry access to the 8703? thanks for the repply

[blevinski]

how did you rewrite with ubicdma

[blevinski]

well this is what I need but I cannot seem to get it in time.

Sometimes, your SPC gets corrupted, and instead of being 6 digits, it's 6 bytes, maybe digits, but maybe unprintable characters you can't simply type in.

For example, 000000 is represented in a hex editor, on the hex-side, as:

303030303030

Maybe you scan memory, and get your SPC, and it's represented in a hex editor, on the hex-side, as:

000030303030

How the heck can you send SPC when it's (null)(null)0000. Not exactly easy to type in the (null) character, now is it?


The solution is easy, but you need to use a tool that will let you send 303030303030 instead of 000000. Cause then you can send SPC of 000030303030, which will unlock SPC. Then use typical methods for writing SPC to 000000, and problem is fixed.

I use QMAT to send SPC using raw hex bytes. The command-prefix is '41', following by SPC, in hexascii form:

41303030303030 will send SPC "000000"

41000030303030 will send our currupted SPC "(null)(null)0000"


You can also use CDMA Workshop, terminal tab, to send raw HEX bytes to the phone. I think you'll see "41 01" in results section, if you're successful at unlocking using SPC. Then just change SPC to 000000... using CDMA Workshop, or QMAT, or QXDM, or whatever program you wish..

Then, don't use QPST again on blackberries, if it's what caused the problem in the first place...

originally posted by beezlewaxen

[excelter]

if SPC corrupted the easiest way is use CDMA workshop
Launch Cdma workshop and Connect to your blackberry port.
Go to Terminal Send Command
41 FF FF 30 30 30 30 30 30 - the result should 41 01 . . . .
if this happen it mean your blackberry already open (SPC)

Go to Security tab, Write SPC "000000"

if you use cdma workshop demo version.. use QXDM and type
nv_write sec_code {"000000"}





Go to Security, Write SPC "000000" - Wait for successful, SPC Repaired.

[EMERGENTPHOENIX]

thank you so much! qmat is the tool i've been so looking for! I'm gonna find a way to send beezlewaxen a thanks as well! If you are reading this beezelwaxin, you are a phone flashing GOD! lol