Huawei EC150 3G USB Modem Unlocking – Complete Guide – Trusted Method By makeiteasyDisclaimer: This document is intend to show the way how to unlock a Huawei EC150 USB Modem / or a CDMA Mobile device. Methods presented here are tested on a specific models and won’t work or no need to work on all models. Do the unlocking process at your own risk. I am not responsible for any damage cause to the device or loss. For unlocking Huawei EC150 you’ll need the following Tools & Softwares: 1. DFS 3.3.0.7 - CDMA Reprogram, flashing software.(www.cdmatool.com) 2. IDM UltraEdit v.17.0.XXX (www.ultraedit.com) 3. EC150Update_11.104.04.00.114.B416.exe – Firmware Update (Incase you need to update the firmware, Not necessary if you don’t want to update) 4. CDMA Workshop 2.7.rar – Reprogram, Flashing (www.cdma-ware.com) (www.filecrop.com) 5. EC150 Drivers – (to install the device without operators dashboard) 6. Mobile_Partner_11.302.09.01.539_Voice_USSD – Dashboard for setting up the connection. Preface: The Standard freeware and tools that available on the internet won’t work on this device because this device has no IMEI Number instead of that it has a MEID number. So you cannot calculate the unlock code based on an MEID. The Standard methods presented for Huawei USB Modems won’t work on this device. You cannot able to update the firmware without SPC Code. So I hereby presented the other way used to read the code from the memory dump. Finding out the SPC (Service Programming Code) of your device: 1. Plug in your Huawei EC150 device to the PC. 2. I assume that you’ve already installed the drivers, if you’re not done already install the drivers with original software comes with the device. 3. After installing the device the system will auto detect and run the User Interface of your service provider. 4. Just Close the Application, Do not Shutdown the device. (See Fig 1.1) Fig 1.1 Fig 1.Note: Normally EC150 will connect to the system by using the following 3 COM Ports. Application Interface c.) We are not going to use the PC UI Interface port here to unlock the device. there is no need to run the DFS online and the demo mode is enough for this process. 1.0. Modem Device b. used to type .7 on your PC and disconnect your Internet connection.3.1 On top of the Interface you will see a “Ports” Command button connected ports.2. Mouse Roll or Double click on the port you want to connect. a.3. to detect the 1. Below that you see a button named “SPC” & send SPC codes to the device.0. Install DFS 3. PC UI Interface (this one is used to run the operators application.2 The DFS User Interface without connecting any device 1.7 checks for an online account. 5.3. DFS User Interface Explained: 1. (If any) Because the DFS 3. After that you see a connection icon to connect or disconnect a specific port. 4. . On below of the application you see a message box which shows you the response of the device & ports.) Note: The AT Commands may vary for each model. 1. 1.9. Make a Google search for AT Commands. Power off – Device will shutdown (Unplug the device and Plug it Again) h. d. You can see various Tabs that used to READ. FTM – File Transfer Mode (for CDMA Mobile phones) e.1. Radio off .ini to know the AT COMMANDS of your device (search the directory where you installed the Service Providers Software. On the Right side of the application window you see “Reset” icon which is used to change the mode of the device. Rebuild – Restore Device to Factory Settings. a.10. you can change it into “00000000000000000” After that you see a “CMD” which is used to send “AT COMMANDS” to the device.Turn off Radio Frequency g.5. On the right side of the SPC You see a “PWD” which is a standard PWD for all devices. i. Offline D – Device is offline Dead mode b. You can find and use an ATsimulator. After Connecting a port the software will try to retrieve the device information and show it to you on the front panel. WRITE and Reprogram the Device 1. Reset – Device will disconnect and will automatically connect again.8. Data Mode – Device will go online. Offline A – Device is offline Active Mode c.7. Radio on – Turn on Radio Frequency f. Usually 16 digits of Hexadecimal value. 1. 1. The Software started to read the memory 8. Fig (1.3) . (Choose a path to save that memory dump file) 11. During this period the software will read the SPC Code. 10. Click on SPC1 and press the memory address listed right to the SPC1. Connect the “Huawei Mobile Connect . Send a false code (any six digits) to the Device by using the SPC Button. 14. The device will show you an error “BAD SPC UNLOCK FAILED” and the device will go to offline for few seconds.6. You’ll see the contents in the Data monitoring page.Application Interface” Port (See Fig 1. Now the Data Analyzer will analyze the data and show you the Results in the result text box. 9. Immediately Press the “Save Buffer” Button.3) 7. Go to Memory Tab and change the Type to “CEFS” and press Read. Open the file with data analyzer and press “Analyze” 13. Most of the case the file size should be 228 KB 12. Save that dump file to your hard disk. 16. The first six digits is the SPC code of your USB Modem.4) Fig 1. .15.4 17. Now you’re Done Unlocking the device. Reprogram the device with other tabs presented on the software. Note down the ASCII Value. Type it on the SPC and send it to the device (See fig 1. Now you see the “DEVICE UNLOCKED” Message on the bottom of the message box. The six digit hexadecimal value next to this string is the SPC code.1 ENJOY SURFING!!! . (See fig 2. Find the Hexadecimal string 00 00 00 38 35 6E FF 01 (it will work for other models also).1) Fig 2.2. Another Method to Find SPC from Memory Dump Using UltraEdit: 1. 2. 3. Other models you’ve to find out …85nÿ on the ASCII section. Open the dump file with UltraEdit text editor.
Report "Huawei EC 150 3G USB Modem Unlocking Guide"