I have the PDA PPC 6800 and I want to flash to Cricket. I try to use the drivers for the PPC 6700 and those working fine, I think!!! :) , becuse I can see the phone on QPTS and BitPim. The thing is when I try to open the nvm folder I can't see nothing about the nvm files.

Some body has the solution for this PDA? Please...help me!!

I use those driver... just in case if some body needs!

So many new CDMA phones have a locked NVM folder, have no ideas yet, waiting for solution.

I used the GetSPC but this generator I think is for Sprint devices only. My device is from Qwest. :(

I used the GetSPC but this generator I think is for Sprint devices only. My device is from Qwest. :(

I think work with qwest too.

Can you post GetSPC please !


BR

Here you go! Please hit the thank you button...

Hi OnlyJoeyq,

Can you give help on how to use this software on the vx6800?
Thank you,
Siemenscordless

is as simple as not biting the fork while eating lol. just copy GetSPC.exe to you ppc, execute it then input esn in caps and press button. btw this calc only works on HTC devices, not motoQ neither other branded phones.

Hi Guys,

I enter the Hex ESN on the GetSPC on the phone and get six digits. When I go to QPST to flash, message says the code is not correct. I have Vx6800 from Qwest. Any help and suggestion is greatly appreciated.

Thank you all!
Siemenscordless.

Good one El Venga......:D..

siemenscordless,

Try changing the last digit of the spc to +/- one integer.

some body help please

some body help please
Hi Vakano,

You need to get the Getspc installed on your phone, not on your computer.
Once it's on your phone, run Getspc. On the first box, enter the Hex ESN (case sensitive) then click on Get SPC. The six digits on the second box is the SPC needed to program the phone.

Hope this helps.
Siemenscordless

Hi Opm,

No, it did not work with your instruction. Anybody has any other suggestion?
Thank you in advance.

Siemenscordless

Perhaps QWEST uses diffirent SPC cal diagram than SPRINT. The dll with GETSPC.EXE is get from the RUU upgrade program package by SPRINT. If u can get this dll from the QWEST mogul RUU upgrade util, replace it and try.

I used UNICDMA and read from starting address 0x01500000.

With a very large length bytes, found the code all by itself with no other
numbers or letter near it.

BTW i could be wrong on that address because i couldn't believe i found it that easily maybe 0x01400000. Anyways UniCDMA is the ticket.

there a lot of of question about Qwest PPC6800 SPC here is the solution for you.

Connect phone with activesync as guess

Copy the PPST_KeyGen.dll and replace the original in the phone to the address below

Click Explore on activesync-->go to "My Windows Mobile-Base Device-->Windows

Copy GetSPC and put in in the memory card or in your 'My Document" of the phone

Run the GetSPC in the phone again it either on your memory card or in "My Document" of your phone

Enter ESN with capital letter and it will give you the 6 digit code as SPC

Now you ready with QPST and have fun

no fun in the QPST is lock nobody know yet how to unlock this folder ....INGENIEEERSS COME ON.....JEJEJEJE im not that brigth

QPST for loading the PRL and reset SPC to all 0 all program Wap and MMS not ESN. The EFS is lock that not fun but not many people want to mess with ESN. Good luck

yes you right.. but if develop is good to know just to proof capavilities...jejeeje.its ok brother

Hi Guys,

I enter the Hex ESN on the GetSPC on the phone and get six digits. When I go to QPST to flash, message says the code is not correct. I have Vx6800 from Qwest. Any help and suggestion is greatly appreciated.

Thank you all!
Siemenscordless.

use mayus bro.

Hey Samsungd415,

It did not work! Remember my phone is from Qwest. Thank for your effort though.
Siemenscordless

Celhack,

What is "mayus"?

I have Telus P4000 I know the SPC can Access QPst Service Programming

But EFS is Blocked same case with Sprint Mogul / Alltel 6800

The Radio ROM Used must be Blocking the Access to EFS, We will required Patched Radio ROM to access EFS (This is my Guess) I have already done15 days Enginnering and used every ESN Changer on Earth but not Succes

Also used QxDM 3.9 with All Active COmmand but No Help

UniCDMA will get the code with a memory read. I've done it twice already

Celhack,

What is "mayus"?

capital letter bro.

Hi Kenserpa45,

Can you share what section of the memory the SPC is in? In other words, I have to read it from where to where.
Thank you,
Siemenscordless

Actual SPC as per Memory not Calculated / So if Some Operator takes Different Logic or you changed SPC and now Forgot than this is Very usefull

Reading SPC of HTC Mogul / P4000 / PPP 6800 / XV6800

Using software UniCDMA 1.095, Just Read the Memory Address 0x01500000

Length, Bytes 524288 then Save it and open the bin file into XVI32 Hex Mode

then go to Address 55C02 There you can find the SPC

In Shown Bitmap the SPC is 870086, You will Never Require GetSPC.EXE

Please DONT FORGET to say THANKS

If you can read memory block then you should be able to read ESN some where else. And should be able to write it too to change ESN. I think just a matter of time.

I was playing about with my Sprint Mogul and found a couple of ways to get your MSL... They basically both get it the same way, just take different routes to get there.

Two different ways to get MSL:

Method A:

* Change the following registry entries in:
HKEY_LOCAL_MACHINE\SOFTWARE\HTC\ATDbgLog
Enable: 1
LogMode: 1
* Wait a reasonable amount of time and soft-reset (I have noticed that it seems to take longer for this value to take affect, so if you reboot and the registry values are not changed, then you need to do it again and wait longer)
* Check to see that the file \Temp\ATDbg0.txt has been created.
* Return the values back to what they were (most likely 0) waiting the same amount of time as above.
* Look in the ATDbg0.txt file and you should see a log of commands sent to the CDMA radio and there should be something like this somewhere in the file:

Code:

11:9:3 Tx:AT+HTC_RMSL=0\r
11:9:3 Rx:+HTC_RMSL: 354201\r\n0\r
11:9:3 Tx:AT+HTC_ROTKSL=0\r
11:9:3 Rx:+HTC_ROTKSL: 216112\r\n0\r

* The numbers next to the Rx: +HTC_RMSL line should be your MSL... I do not know what the ROTKSL is for, but included it in the snippet incase someone knows.




Method B:

* Start your favorite pocket-pc terminal program (like pocketPutty - [Only Registered Users Can See Links])
* Connect to com9 (Putty used default speed of 9600)
* type in AT+HTC_RMSL=0 and hit enter, your MSL will be displayed.
* Soft reset to restore phone functionality

Let me know if it works for you...

Thanks,

Geoff (gZUB @ PPCGEEKS)

Hey Samsungd415,

It did not work! Remember my phone is from Qwest. Thank for your effort though.
Siemenscordless

Differant Providers use diff Lock Codes

Sprint use's an algorithm of the ESN

Verizon use's 6 0's (000000)

I'm not Sure what Qwest use's as I've never had one (Had a girlfriend once that work's at Qwest but never a phone)

There aren't that many methods of a cdma locks (I believe the manufacturer would say: either this way or that!) so try 6 0's (zero's)

Geoff

I was playing about with my Sprint Mogul and found a couple of ways to get your MSL... They basically both get it the same way, just take different routes to get there.

Two different ways to get MSL:

Method A:

* Change the following registry entries in:
HKEY_LOCAL_MACHINE\SOFTWARE\HTC\ATDbgLog
Enable: 1
LogMode: 1
* Wait a reasonable amount of time and soft-reset (I have noticed that it seems to take longer for this value to take affect, so if you reboot and the registry values are not changed, then you need to do it again and wait longer)
* Check to see that the file \Temp\ATDbg0.txt has been created.
* Return the values back to what they were (most likely 0) waiting the same amount of time as above.
* Look in the ATDbg0.txt file and you should see a log of commands sent to the CDMA radio and there should be something like this somewhere in the file:

Code:

11:9:3 Tx:AT+HTC_RMSL=0\r
11:9:3 Rx:+HTC_RMSL: 354201\r\n0\r
11:9:3 Tx:AT+HTC_ROTKSL=0\r
11:9:3 Rx:+HTC_ROTKSL: 216112\r\n0\r

* The numbers next to the Rx: +HTC_RMSL line should be your MSL... I do not know what the ROTKSL is for, but included it in the snippet incase someone knows.




Method B:

* Start your favorite pocket-pc terminal program (like pocketPutty - [Only Registered Users Can See Links])
* Connect to com9 (Putty used default speed of 9600)
* type in AT+HTC_RMSL=0 and hit enter, your MSL will be displayed.
* Soft reset to restore phone functionality

Let me know if it works for you...

Thanks,

Geoff (gZUB @ PPCGEEKS)


It basically gives you the MSL and the OTKSL (One time keyed service lock).

For all Qwest phones, the OTKSL is always 879378 (USWEST). Sprint seems to use random OTKSL's.

This code is pretty useless for other carriers because you cannot load the PRL with that code. You can get to the NAM programming one time by inputting ##OTKSL. For carriers like Cricket, Virgin and Qwest it is pretty useful because it is the same SL code for every phone they have and they don't give away the MSL when they help you program your phone.

Just used drivers in forum, changed modem settings in handset & was able to get SPC and Flash with CDMA WOrkshop. Works 100%..... Flashed to Pocket in Texas...

I've been trying to get the Get SPC tool but I'm having a hard time downloading it could anybody help me I would appreciate it. when i tried to download it. It says( GetSPC.exe is not a valid win.32 application.) any ideas

I've been trying to get the Get SPC tool but I'm having a hard time downloading it could anybody help me I would appreciate it. when i tried to download it. It says( GetSPC.exe is not a valid win.32 application.) any ideas


You can't run GetSPC on your computer. Load it to the phone and run it on there.

Need help unlocking and flashing it to cricket. Please help.:(

When I install GetSPC on my phone and input my hex esn and press go it tells me it could not link to dll. Am I doing something wrong?

When I install GetSPC on my phone and input my hex esn and press go it tells me it could not link to dll. Am I doing something wrong?

You need to have the DLL file in the same folder as the GetSPC program to run it.

The solution to find the spc is in this post:

[Only Registered Users Can See Links]

Use the mini usb cable and the drivers pliblicate on this post, you need to change the mode to the ##diag (##3424 # or talk) mode. Connect and when the windows aking for drivers use this drivers.:D

[Only Registered Users Can See Links]

I try with the SPC Get and won't work for any of the PPC 6800 that I Get.

hi bro how write PRL in HTC 6800 ??

Better yet, how do you get QPST to recognize the 6800?

Just used drivers in forum, changed modem settings in handset & was able to get SPC and Flash with CDMA WOrkshop. Works 100%..... Flashed to Pocket in Texas...

Have you had any luck changing the ESN of the 6800 with this program?

i all redy downlod driver but its not working ones i lode driver its ask me for sys file (qcmdmxp.sys file not found plese verify the correct filename was given) can u help me thanks






I have the PDA PPC 6800 and I want to flash to Cricket. I try to use the drivers for the PPC 6700 and those working fine, I think!!! :) , becuse I can see the phone on QPTS and BitPim. The thing is when I try to open the nvm folder I can't see nothing about the nvm files.

Some body has the solution for this PDA? Please...help me!!

I use those driver... just in case if some body needs!

i all redy downlod driver but its not working ones i lode driver its ask me for sys file (qcmdmxp.sys file not found plese verify the correct filename was given) can u help me thanks

When it asks for the file it should ask you if you want to browse. Click on browse and direct it to My Computer/Local Disk (C:)/WINDOWS/system32/drivers
You should see it in there. Hit ok and your done!

I have the mogul 6800 but I cannot make any cdma program read how do i set the port com It seem slike it only works usb
please can some one advice

regards

You need to dial ##3424# and then tap start , look for the device in my pc preferences what number of com is working :D

Vista is seeing my phone as being on COM3, but unicdma isn't able to find a phone on that port.

I did the ##diag#, installed the drivers... went to my device manager, and my htc shows up as a modem on com3. I try running unicdma and setting it to com3, but it just comes back with "no phone connected"

Any Ideas?? thanks!

use diag comport, not modem comport.

I already used it but it is not reading on Unicdma. I have Mogul PPC6800 by
Quest. the get spc program does not read the correct spc with this model. Please help as I am very confused. Thanks

I already used it but it is not reading on Unicdma. I have Mogul PPC6800 by
Quest. the get spc program does not read the correct spc with this model. Please help as I am very confused. Thanks

Two different ways to get MSL:

Method A:

* Change the following registry entries in:
HKEY_LOCAL_MACHINE\SOFTWARE\HTC\ATDbgLog
Enable: 1
LogMode: 1
* Wait a reasonable amount of time and soft-reset (I have noticed that it seems to take longer for this value to take affect, so if you reboot and the registry values are not changed, then you need to do it again and wait longer)
* Check to see that the file \Temp\ATDbg0.txt has been created.
* Return the values back to what they were (most likely 0) waiting the same amount of time as above.
* Look in the ATDbg0.txt file and you should see a log of commands sent to the CDMA radio and there should be something like this somewhere in the file:

Code:

11:9:3 Tx:AT+HTC_RMSL=0\r
11:9:3 Rx:+HTC_RMSL: 354201\r\n0\r
11:9:3 Tx:AT+HTC_ROTKSL=0\r
11:9:3 Rx:+HTC_ROTKSL: 216112\r\n0\r

* The numbers next to the Rx: +HTC_RMSL line should be your MSL... I do not know what the ROTKSL is for, but included it in the snippet incase someone knows.

Method B:

* Start your favorite pocket-pc terminal program (like pocketPutty - [Only Registered Users Can See Links])
* Connect to com9 (Putty used default speed of 9600)
* type in AT+HTC_RMSL=0 and hit enter, your MSL will be displayed.
* Soft reset to restore phone functionality

thanks for your reply. but I am not really as professional as you are. I do not know how to do what you wrote above. Thanks anyway

thanks for your reply. but I am not really as professional as you are. I do not know how to do what you wrote above. Thanks anyway

Download any registry editor onto your phone like total commander or phm registry editor and pm me and Ill help you.

I NEED NAME PROGRAME UTSTARCOM

Here it is Ali:

##7764726 send

:mad:

I was playing about with my Sprint Mogul and found a couple of ways to get your MSL... They basically both get it the same way, just take different routes to get there.

Two different ways to get MSL:

Method B:

* Start your favorite pocket-pc terminal program (like pocketPutty - [Only Registered Users Can See Links])
* Connect to com9 (Putty used default speed of 9600)
* type in AT+HTC_RMSL=0 and hit enter, your MSL will be displayed.
* Soft reset to restore phone functionality

Let me know if it works for you...

Thanks,

Geoff (gZUB @ PPCGEEKS)

About that "locked" NVM folder - How does one connect PPutty either internally or externally to Phone VIA SSH or Telnet instead of Modem on Com:9 - what is the "server" name used by the 6900? Because if I can connect that way maybe we can change the attributes of that folder? And why is it we can scribble all over the area where those files are, yet we cannot read or write the physical files?:rolleyes:

After days of trying I finally found the spc! The 0x01500000 does not always work...especially with 52xxxx bytes. The address I used to find it was 0x01557A00. I read the largest amount of bytes just because and I found the spc after over a week of searching about 1/4 to 1/3 of the way down in notepad. Hope this helps everyone!!;)

i am still unable to install qcmdmxp.sys everytime i install it, it says problem with install

Ok-

1st-- NAM programming ##778# or ##778(Send) or #*#778# or #*#778(Send), then select "EDIT" and enter your SPC

2nd-- getting SPC: ust "Get SPC" run it on the device and type in the hex ESN with letters in all CAPS, or install .net compact framework 3.5 on the device and use "BAFS MSL Grabber", then simple click the "Get MSL/SPC" button and it will show (works on any CDMA HTC device)

3rd-- SEARCH and READ a little more...all of these things are already posted, and there are many other solutions for doing the same things that i did not list here

Ok-

1st-- NAM programming ##778# or ##778(Send) or #*#778# or #*#778(Send), then select "EDIT" and enter your SPC

2nd-- getting SPC: ust "Get SPC" run it on the device and type in the hex ESN with letters in all CAPS, or install .net compact framework 3.5 on the device and use "BAFS MSL Grabber", then simple click the "Get MSL/SPC" button and it will show (works on any CDMA HTC device)

3rd-- SEARCH and READ a little more...all of these things are already posted, and there are many other solutions for doing the same things that i did not list here

hey thats funny cuz i already got past that part lol:D.....problem i am having is installin the qcmdmxp.sys which inturn i am not able to use qpst. so far when i dial #228 it brings me to vzw instead of sprint thas a +, i used active sync to upload a prl of vzw for the vx6700. i am just aaskin is there anyway to get the computer to find the file becuz everytime it installs qcmdmxp.sys is says there was an error

hey thats funny cuz i already got past that part lol:D.....problem i am having is installin the qcmdmxp.sys which inturn i am not able to use qpst. so far when i dial #228 it brings me to vzw instead of sprint thas a +, i used active sync to upload a prl of vzw for the vx6700. i am just aaskin is there anyway to get the computer to find the file becuz everytime it installs qcmdmxp.sys is says there was an error

"Browse" for the fileand you will find it in your "C:\Windows\System32" folder...or your "C:\Windows\System32\Drivers" folder

don't forget to hit the thanks button.

I have a Sprint HTC PPC6800SP that I am not able to read the SPC him with the procedures posted not get success in the process, please help me with this problem.

try this one
[Only Registered Users Can See Links]

try this one
[Only Registered Users Can See Links]

Thank you wearing it the GetSPC but was not understanding how to do it more, played the file GetSPC inside the device using ActiveSync and was 100% functional.

ok give me your esn hex i get u spc for you

NvRam Method for changing esn change on a blackberry 8700 (found by myself)

--------------------------------------------------------------------------------

here is the way to change an esn by the nvram method with cdma workshop

i have atached the adress of the 6 esn emplacement that need to be change.

ESN addresses:
1013:3084
1014:5654
1014:5730
101E:D104
1027:0209

here is the way to change an esn by the nvram method with cdma workshop

i have atached the adress of the 6 esn emplacement that need to be change.



ESN addresses:
1013:3084
1014:5654
1014:5730
101E:D104
1027:0209