6800 / Mogul Password = 0400584752420249

[gsm1999]

I found this in another forum.

6800 / Mogul Password = 0400584752420249

ESN in RAM is Present in following Address

ESN addresses:
0134:750C
0135:5738
013C:648C
0160:C360
0161:B9C0
0168: DF54
0168:E028
0168:E39C
0169:4A20
0169:8910
016A:5D54
0194:925C
019D:E04C
01A8:1020

[justpctech]

what the ???? do we need this for? explain please, and maybe put all these posts together in one spot instead of a new one each time you add something that means nothing to most of us here.

[GoodThings2Life]

Judging by the other 6 posts, he's piecing together information for "hacking" phones, so I'm betting he's being vague for a reason.

[justpctech]

my thoughts exactly...but he could at least keep it all in one spot anyways...sheesh.

[hetaldp]

Yeah it was my post on Mobile-Files.com for changing E*S*N

But still no Success

[gsm1999]

Credits to all.. Trying to help all

I am sorry, Use QXDM to send the SPC command and the Password Unlock the phone..

Then it is possible to access and manipulate the phone..

example ;

spc "000000" Verizon {enter}
PASSWORD "0400584752420249" {enter}
After this phone will be fully unlocked...

here are more commands below;

....rapidshare.com/files/5115532/Qualcomm_XDM_2.08.rar.html

To reads the locks....
spc "xxxxxx"
mode offline-d
nv_read lock code.

To write New SPC LOCKS...
password "0400584752420249"
mode offline-d
nv_write sec_code 0x30, 0x30, 0x30, 0x30, 0x30, 0x30
SPC "000000"
mode reset


; nv_read esn ; Mobile ESN
;
; nv_read verno_maj ; NV Major Version
; nv_read verno_min ; NV Minor Version
; nv_read scm ; Station Class Mark
; nv_read mob_cai_rev ; Mobile CAI revision number
; nv_read mob_firm_rev ; Mobile firmware revision number
; nv_read mob_model ; Mobile model

print "<><><> ESN Write"

nv_write esn {0x00000000} ; ESN Write

print "<><><> Writable General Settings"

nv_write slot_cycle_index {0x01} ; Write Slot Cycle Index
nv_write curr_nam {0} ; Current NAM
nv_write sid_nid_list { 2222, 12 } ; CDMA SID_NID_LIST
nv_write lock_code {"0000"} ; Lock_code
nv_write auto_nam {false} ; auto nam

nv_write therm { 0x50, 0x96 } ; Write therm Value
; nv_write vbatt { 133,139 } ; Write Battery Value ==> es2¿¡ Àû¿ë.
nv_write vbatt { 139,164 } ; Write Battery Value ==> es3¿¡ Àû¿ë.
nv_write cont_key_dtmf { on } ; Continuous DTMF tones
nv_write config_chksum { 0xffff } ; Configuration Checksum

print "<><><> NAM1 Parameters"

nv_write name_nam {0, " kimhuyna "} ; NAM Name
nv_write dir_number {0, "0172658458"} ; NAM Directory #
nv_write min1 {0, "265-8458", "265-8458"} ; MIN1 Number
nv_write min2 {0, "017", "017"} ; MIN2 Number
nv_write pcdmach {0, 779, 486} ; A and B primary CDMA channels
nv_write scdmach {0, 738, 568} ; A and B secondary CDMA channels
nv_write sid_nid {0, 1, 1700,12, 1700,12, 1700,12, 1700,65535} ; the SID of the carrier
nv_write cdma_sid_lock {0, 0, 1, 0, 0, 0, 0} ; Lock SID List
nv_write imsi_11_12 {0, "00"} ; Mobile network code
nv_write imsi_mcc {0, "450"} ; Mobile Country Code
nv_write accolc {0, 0x07, 0x07} ; Access overload class
nv_write mob_term_home {0, false, true} ; CDMA Home SID Terminated Reg
nv_write mob_term_for_sid {0, false, true} ; CDMA Foreign SID Term Reg
nv_write mob_term_for_nid {0, false, true} ; CDMA Foreign NID Term Reg
nv_write cdma_pref_serv {0, "b only"} ; Pref Serving System
nv_write pref_mode {0, "digital only"} ; Pref Mode
nv_write nam_chksum {0, 0xffff} ; Checksum for NAM
nv_write min_chksum {0, 0xffff, 0xffff} ; Checksum for MIN
nv_write air_timer {0, 0x00 } ; Air time ( min ) for NAM

print "<><><> NAM2 Parameters"

nv_write name_nam {1, " kimhyuna "} ; NAM Name
nv_write dir_number {1, "0172658458"} ; NAM Directory #
nv_write min1 {1, "265-8458", "265-8458"} ; MIN1 Number
nv_write min2 {1, "017", "017"} ; MIN2 Number
nv_write pcdmach {1, 779, 486} ; A and B primary CDMA channels
nv_write scdmach {1, 738, 568} ; A and B secondary CDMA channels
nv_write sid_nid {1, 1, 1700,12, 1700,12, 1700,12, 1700,65535} ; the SID of the carrier
nv_write cdma_sid_lock {1, 0, 1, 0, 0, 0, 0} ; Lock SID List
nv_write imsi_11_12 {1, "00"} ; Mobile network code
nv_write imsi_mcc {1, "450"} ; Mobile Country Code
nv_write accolc {1, 0x07, 0x07} ; Access overload class
nv_write mob_term_home {1, false, true} ; CDMA Home SID Terminated Reg
nv_write mob_term_for_sid {1, false, true} ; CDMA Foreign SID Term Reg
nv_write mob_term_for_nid {1, false, true} ; CDMA Foreign NID Term Reg
nv_write cdma_pref_serv {1, "b only"} ; Pref Serving System
nv_write pref_mode {1, "digital only"} ; Pref Mode
nv_write nam_chksum {1, 0xffff} ; Checksum for NAM
nv_write min_chksum {1, 0xffff, 0xffff} ; Checksum for MIN
nv_write air_timer {1, 0x00 } ; Air time ( min ) for NAM

[gsm1999]

Has any having problems connecting back to the 6800 after editing the efs?

[shadowmite]

We can read and write everything but the esn using the "special" radio they included accidently in our rom releases. still, the one part we need involves needing to hack the radio and we are working on this. Please stop spamming all the attempts that didn't work so we can focus on what might work instead.

EDIT: Let me also add before anyone gets carried away with whats in this thread, the password he lists is NOT the correct password for any phone but the guy who extracted it from his. They are each unique, and personally identifying.

[hetaldp]

The Radio Shadomite is Talking is i thnik the First WM6 for Sprint and immidiately they have removed it for 10 hours and again Relisted

Shadowmite if you have that Radio that Please List it

[hetaldp]

Just Remove Battery

Connect miniUSB Cable Pres Power Button + Voice Tag Button Below OK and then Place Battery

This Puts the Phone into Dignostic Mode I have used to Conect QPST QxDM but no Help mtty Connects but all commans returns Invalid Command