PDA

View Full Version : How To Unlock Cdma Phones



Cellunlocker
17-12-2003, 02:14 AM
I am trying to find the Hex address for the SPC code in the Kyocera 2345, so I guess I will make this post a place to list the hex addresses of the SPC codes on most phones. These addresses can be used with most DM software to read/write the SPC code into the phone. Hopefully if everyone will post the SPC locations that they know, we can all help each other out. I know that the DM softwares work with many different manufacturers and models of phones, including Qualcomm, Kyocera, LG, Samsung, Audiovox, Denso and others. This could be a huge help to everyone who works with cellphones. I will post a few locations to get things started, along with an example of how to use the location to get your spc code

The format I am going to use to post the codes is the following:

Phone Model
Software Version (if Known)
Hex address


Here are some of the locations that I currently know:


Qualcomm 860
;GZ1004 AND ET100E
PEEK BYTE 0101:D382 0X06

Qualcomm 1960
;ES1114
PEEK BYTE 0101:BA31 0X06
;HA11142
PEEK BYTE 0101:B344 0X06
;ES1004
PEEK BYTE 0101:D17C 0X06

Qualcomm 2760
;HE1010
PEEK BYTE 0101:E818 0X06
;TW1007
PEEK BYTE 0101:CA3D 0X06

Qualcomm 2700
;AM1307
PEEK BYTE 0000:F754 0x06
;BH2101
PEEK BYTE 0000:FFEB 0x06

Qualcomm 2035
;KU1010
PEEK BYTE 0102:68C8 0X06
;KX1209
PEEK BYTE 0102:89E4 0x06
;
PEEK BYTE 0102:89E0 0X06



To use these locations to read your SPC code, start your DM software, wait until it connects to the phone, then go to the Scripts page (usually F8). To read the code just type the line corresponding to the software version of your phone. If you have a Qualcomm 2700 with software version AM1307, you would type:

PEEK BYTE 0000:F754 0x06

You should then see a response similar to the following:

31 32 33 34 35 36

Just remove the 3 from the beginning of each pair of numbers and you will be left with the SPC code for your phone. In the example the SPC code would be 123456.

Hopefully everyone here will post the versions and hex addresses that they know and we will be able to have a nice large list of phones that we can unlock. I have more locations that I can post but I will wait and see if anyone else starts to post. I am more than willing to share, but I would like others to share also.

Cellunlocker

luzer
21-12-2003, 01:19 AM
Samsung SCH-3500
0000:32f7

spathi-wa
06-01-2004, 11:10 PM
hello,

where can i get dm software?

thanks,

spathi

newton
16-03-2004, 10:59 PM
Kyocera 2035
01026580
010268c8
01029248
01029250
010289e0
01029248
0102...