[AT&T Samsung Galaxy Note I717] darkspr1te:
Hi Nathan,

I did a quick google and i see that your device is a msm8960, Please confirm this before following the instructions.

As you are using Linux and a windows vm I can bring you some good news, there is a open source QPSt replacement in the works, I've attached the VERY VERY early beta of this, It is a early prototype that was originally written by a fellow of the name scotty222 or similar(if the original author wants to get in touch, please do), i am not sure, It's further being developed by JCSullins (main coding) and myself ( protocol analysis, reverse engineering).

My point is ,

1) Never been tried on a MSM8960 device

2) tested working on non sercure qfused msm8660 devices

3) included files ONLY FOR MSMS8960 device, usage on any other msm chipset WILL kill your device beyond normal repair.

4) we cannod provide a great deal of support on this code yet, it's never been tested on msm8960

How to Use

Unpack the 4 files, hex.bin / hex2.bin / qdload.pl/qdload2.pl to a dir of your choice

attached phone in qdload mode

type 'perl qdload.pl'

you should see a few messages go by, you will know when it worked

as you will see

Using TTY: /dev/ttyUSB0
Sending MAGIC3...
Got response: 03 00 03
Sending secureMode...
secureMode send ok
Response: 03 00 06
Sending openMulti ...
openMulti send ok
Response: 03 00 06
Writing 1024 bytes to 0x00000000; 1620548 bytes left.
Writing 1024 bytes to 0x00000400; 1619524 bytes left.
Writing 1024 bytes to 0x00000800; 1618500 bytes left.
Writing 1024 bytes to 0x00000c00; 1617476 bytes left.

<snip repeated reports>

Writing 580 bytes to 0x0018bc00; 0 bytes left.
Got response: 08 06 01 01 00 90 00 00
Sending CloseFlush...
closeFlush send ok
Response: 03 00 06
Requesting Reset...
doReset send ok
Response: 03 00 06

If you get the same as above then onto stage two

type 'perl ./qdload2.pl'

Using TTY: /dev/ttyUSB0
Sending MAGIC3...
Got response: 03 00 03
Sending secureMode...
secureMode send ok
Response: 03 00 06
Sending openMulti ...
openMulti send ok
Response: 03 00 06
Writing 1024 bytes to 0x00000000; 1620548 bytes left.
Writing 1024 bytes to 0x00000400; 1619524 bytes left.
Writing 1024 bytes to 0x00000800; 1618500 bytes left.

<snip repeats>

Writing 1024 bytes to 0x0018a400; 5700 bytes left.
Writing 1024 bytes to 0x0018a800; 4676 bytes left.
Writing 1024 bytes to 0x0018ac00; 3652 bytes left.
Writing 1024 bytes to 0x0018b000; 2628 bytes left.
Writing 1024 bytes to 0x0018b400; 1604 bytes left.
Writing 1024 bytes to 0x0018b800; 580 bytes left.
Writing 580 bytes to 0x0018bc00; 0 bytes left.
Got response: 08 06 01 01 00 90 00 00
Sending CloseFlush...
closeFlush send ok
Response: 03 00 06
Requesting Reset...
doReset send ok
Response: 03 00 06

When stage one is complete dmesg should show the phone deteach and reattach, stage two will show the same but on reattach you should have come back as a sd-card

scsi 2:0:0:0: Direct-Access Qualcomm MMC Storage 2.31 PQ: 0 ANSI: 2

and lsusb should show a device with the pid/vid 05c6:90025

I hope it works/helps. As mentioned this attached file is a test/beta for MSM8960 ONLY, do not complain if used on other devices it kills it.

thanks to Soul Shadow for concept, Jcsullins for implementing a working perl version.

please if you could give feed back & thanks.

darkspr1te